Behavioral task
behavioral1
Sample
1605074f4132b56965094c066df1f206.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1605074f4132b56965094c066df1f206.exe
Resource
win10v2004-20231215-en
General
-
Target
1605074f4132b56965094c066df1f206
-
Size
69KB
-
MD5
1605074f4132b56965094c066df1f206
-
SHA1
a445a1866f1d268d45d81bff92b69a67fa777ade
-
SHA256
f8b57282c959c74c8e15c65e752c08c95dbd3ae9c7db0f134f814195cdcf9980
-
SHA512
9e28adbfb1a2fcdcea996268d386cfbb4c16b071060e2760abcbc3daea3a8def15a4d8537f4868570349c818be00bb6285ec227d16c68e79d29efcccdc9feb37
-
SSDEEP
1536:d6RnQs1fEtt065q6l9avDsX+IrXONJxEXPv//od:d6RQztt065rljX+9EXPv/gd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1605074f4132b56965094c066df1f206
Files
-
1605074f4132b56965094c066df1f206.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 507KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE