Behavioral task
behavioral1
Sample
69aa57c30f63451241a51ec6466104a8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
69aa57c30f63451241a51ec6466104a8.exe
Resource
win10v2004-20231222-en
General
-
Target
69aa57c30f63451241a51ec6466104a8
-
Size
547KB
-
MD5
69aa57c30f63451241a51ec6466104a8
-
SHA1
982737a5ccf5e75e24a17d3c7ca1abae82881588
-
SHA256
64ba915e9935dd180eda7d036dc9d8e9cf102ef10fcb5477e8b30a4d88bf8b67
-
SHA512
205f6d4830cd1c4f83926adb52bc244949108f651dd2c0bed882ab5a4f8b4b8dbac4659894eb8ee9452c65a511a146a98c9885aa5e5c0221513d5fea99c13fe8
-
SSDEEP
12288:0MAWAIeWCLFqP7YkjxYke+rlaEwHdl5ZpJo9j/hkcdqp7IxAAQAjrSs:xmtWCLYP7XNYkwE2dl5Znox/hk6q9CAk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69aa57c30f63451241a51ec6466104a8
Files
-
69aa57c30f63451241a51ec6466104a8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 780KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 677KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE