Behavioral task
behavioral1
Sample
64b445452ee8cdd8d1c10c95139119a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64b445452ee8cdd8d1c10c95139119a4.exe
Resource
win10v2004-20231215-en
General
-
Target
64b445452ee8cdd8d1c10c95139119a4
-
Size
430KB
-
MD5
64b445452ee8cdd8d1c10c95139119a4
-
SHA1
51727b8dd9cc52c86c46fbc012a97263ba2577ff
-
SHA256
32de0c9cb6a96bf4a483d9db69c420b16652db3c08de8d09172d34aa4ba429b9
-
SHA512
8af75e83a3e55751249f79beabf19b88b6ddc62f37ee1cd0e1e745cb6d0087fe3809a4c46a76fe67058aeca56e838a2f639da3faf6d4981a2f3de1c32b0d8b85
-
SSDEEP
12288:Qe3MS1hPBxWhF3MbH2/kxNo7s7B2W+BWHbaQHvYzInYcV:Y0lBUrSLL7B2PaBn5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64b445452ee8cdd8d1c10c95139119a4
Files
-
64b445452ee8cdd8d1c10c95139119a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 6.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE