Behavioral task
behavioral1
Sample
64d31496b7eda8f1d44ee662e1c00999.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64d31496b7eda8f1d44ee662e1c00999.exe
Resource
win10v2004-20231222-en
General
-
Target
64d31496b7eda8f1d44ee662e1c00999
-
Size
134KB
-
MD5
64d31496b7eda8f1d44ee662e1c00999
-
SHA1
7c601ed02719394e50a8d59c4db45b1b5325a29a
-
SHA256
c6f97da6910680c689eb7e5acb5286723f308e5f7a58a1e0ecacfe818642c191
-
SHA512
540678e37f720166d00c002782415faf7fe522586fdca0e90bcd5a0e41501524ff8466d44edb30e85ba33652f96db519f0dcf1132097cd1ead9d1c42b2d79712
-
SSDEEP
1536:XLnKyuZqlQb2QhRN+wzHQmGS02QUyghZ6Moykgnjq4Tq9XEiIoE:XLnKKUtBGSHQbgh8Moykoeeq9XaR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d31496b7eda8f1d44ee662e1c00999
Files
-
64d31496b7eda8f1d44ee662e1c00999.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE