Behavioral task
behavioral1
Sample
64bc80c9f74e929b626db9585c7cda3a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64bc80c9f74e929b626db9585c7cda3a.exe
Resource
win10v2004-20231215-en
General
-
Target
64bc80c9f74e929b626db9585c7cda3a
-
Size
137KB
-
MD5
64bc80c9f74e929b626db9585c7cda3a
-
SHA1
c0864067fe74880a5e38c81e0a1c5ca295b268d1
-
SHA256
4f7830a0bd04776b12a9100c70c96f93d8631a4b4a9a1e7c185085d7c13fddf1
-
SHA512
8c331da93db2a27d25a634935ef01c4b53409f60c8d5cdfd64d497f876568afdd3f0ce65efc54ab874b1259235b19dc9d2c6afe0a1728544288ec6b4b0f9e3d0
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53WZ:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64bc80c9f74e929b626db9585c7cda3a
Files
-
64bc80c9f74e929b626db9585c7cda3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE