Behavioral task
behavioral1
Sample
69673e13bb79ef56f80355a5ecad3a95.exe
Resource
win7-20231215-en
General
-
Target
69673e13bb79ef56f80355a5ecad3a95
-
Size
1.1MB
-
MD5
69673e13bb79ef56f80355a5ecad3a95
-
SHA1
0a2d45f7ef1dc71da5f7d2e68524a1baaeb01543
-
SHA256
68a1f83182fad1d755867d41bc897041f5fe2af6c5f068baf6c8c702f7c59045
-
SHA512
af785b3b3bb41bc119a3084558346d5a181095088542e00d451359341aa785c79599dfca21bd94c646252461da7aade708a23fc033249b1ca43f7cc83388fe2b
-
SSDEEP
24576:mDybvhieUmzLJuDRNgiQJuxS/fIZrTyqtFUmBj+MMwC:riRIcRPQuIArT1FUmF+MMn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69673e13bb79ef56f80355a5ecad3a95
Files
-
69673e13bb79ef56f80355a5ecad3a95.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE