Behavioral task
behavioral1
Sample
65a38a6543cadc69e3cd9958609185cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65a38a6543cadc69e3cd9958609185cf.exe
Resource
win10v2004-20231222-en
General
-
Target
65a38a6543cadc69e3cd9958609185cf
-
Size
266KB
-
MD5
65a38a6543cadc69e3cd9958609185cf
-
SHA1
041225efde7612a9fa3fc64dc9fe0c1991e5faf3
-
SHA256
e9caf8d6f1403277d8698ae59559da700ab2ca03a94775d676b4a77e16e36c82
-
SHA512
5254d34d9c1e625d90e9e48a0e1cf0a785ba5a70ca608251a7f8313a801d91b3b5778997ab3149c35f41f78debd9627d8132b423c851c4593857ba6403463829
-
SSDEEP
6144:R0TpJ7+/8N180QCeH70pIp895pAn9Mw030jZMKI0UR:e37Ai11QCGOLpAn9nt1KzR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65a38a6543cadc69e3cd9958609185cf
Files
-
65a38a6543cadc69e3cd9958609185cf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE