Behavioral task
behavioral1
Sample
60f65a0df0f76ffbfa6b36b1802ee589.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
60f65a0df0f76ffbfa6b36b1802ee589.exe
Resource
win10v2004-20231215-en
General
-
Target
60f65a0df0f76ffbfa6b36b1802ee589
-
Size
139KB
-
MD5
60f65a0df0f76ffbfa6b36b1802ee589
-
SHA1
6b4223604f03a66afc45b8e7b6fa4a5605594621
-
SHA256
e55b25d10f21a1fc0c1d7ed9aeb0865680b1c8a8dc85ebe69300dc0f8dd08657
-
SHA512
85a2dce09672f8070923242f2db7d9272a89132485dfaf47ae87761272b2b0994007796a4c321aa6fd4b90104e929a737f97c5c28ee164ea48a4ae46306d6e11
-
SSDEEP
3072:sNANub6UIGRxvJakl1HqKQsQOv8xHnGZFsQ/fCTP2L1ChNAhXaX8tmbYS:sNW86UIWZjqKQsQfGZFrf0P2L1Ch0X7G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60f65a0df0f76ffbfa6b36b1802ee589
Files
-
60f65a0df0f76ffbfa6b36b1802ee589.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE