Behavioral task
behavioral1
Sample
669f27a0ecd8d1fd4db4f426d26dcee1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
669f27a0ecd8d1fd4db4f426d26dcee1.exe
Resource
win10v2004-20231215-en
General
-
Target
669f27a0ecd8d1fd4db4f426d26dcee1
-
Size
3KB
-
MD5
669f27a0ecd8d1fd4db4f426d26dcee1
-
SHA1
46681ab7b499c5ae6c917c8db97a7f44a7fd3685
-
SHA256
dc3ee36775f2ff214298bb85fa0057acd31ca4f636b29f152b0b9f0806efc1c9
-
SHA512
4cb10a18746fd7bd3c34c18b1663e24b82d99d52e806c9dfcdb8ab32c880c99668e7df254ff4dceabb10573f5a97515ad110a940ca54bf9bc8ce5110d16edec1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 669f27a0ecd8d1fd4db4f426d26dcee1
Files
-
669f27a0ecd8d1fd4db4f426d26dcee1.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE