Behavioral task
behavioral1
Sample
636e464f180896673b619466023da040.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
636e464f180896673b619466023da040.exe
Resource
win10v2004-20231215-en
General
-
Target
636e464f180896673b619466023da040
-
Size
241KB
-
MD5
636e464f180896673b619466023da040
-
SHA1
cfc6fe87b9af2342da3c6e2a34e34c424550aadd
-
SHA256
45b652475d14d465832b2ecde8696fd404f63e71264ae087747b4ebc847bbc6f
-
SHA512
4bbb61b9236af81d2255b1eb4337326b3d790e18c18bb17fc490344a6d77b37608ad45f82da5d4627f84d8bb75ce808d4454ffe1308a2e12237fea3e76b6f60b
-
SSDEEP
6144:zRcEgxVQxcwBkOKW5J97vL9xY4z02awmgvb9EfbJ:dcEgxVOKQ7vLlz0Ox9EfbJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 636e464f180896673b619466023da040
Files
-
636e464f180896673b619466023da040.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 855KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE