Behavioral task
behavioral1
Sample
65929cd8404f96c1fe3133546970a4ed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65929cd8404f96c1fe3133546970a4ed.exe
Resource
win10v2004-20231215-en
General
-
Target
65929cd8404f96c1fe3133546970a4ed
-
Size
62KB
-
MD5
65929cd8404f96c1fe3133546970a4ed
-
SHA1
c3c3d5c4ded2a580e6a49bbc16b099b472ca2117
-
SHA256
74a50221ec7ce77f2f7b3c6488e2b6fa3c1220e311f3eb2d9ceef7bbef92a627
-
SHA512
065c5855a8606eded5a92b67f2fb160c18cefa8c44bfca59fe6eb49fc5efa1d66de020cf1e800675810ff9256b7e03ff6741e611575ff735f941c2af3d91e75d
-
SSDEEP
1536:IBCM9iBJBH5/q1xNWJrkufFFQ8fiknouy8YEY5qXXQ:seBJBU1xYJTQ8fvoutYLIXXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65929cd8404f96c1fe3133546970a4ed
Files
-
65929cd8404f96c1fe3133546970a4ed.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE