Behavioral task
behavioral1
Sample
68202814a17354a1818ee73837221b87.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
68202814a17354a1818ee73837221b87.exe
Resource
win10v2004-20231215-en
General
-
Target
68202814a17354a1818ee73837221b87
-
Size
926KB
-
MD5
68202814a17354a1818ee73837221b87
-
SHA1
a4730eacd3ac233f5665d79fc6518486a6cbd80d
-
SHA256
15d2a992159f901ebfd3dc17ae218b173aca7efd801dc681f3b531ca202c6196
-
SHA512
64a640b46cdb2ccf1084be5e3fa7e3a5f3b016cce185285c8c157c2e90f243986c90da36193931dd57f58bd07e7f66be84c405ed1c873c77ac907e41c3b55268
-
SSDEEP
12288:3lolgQH5imsXnxMqb5pGEfdbP1+KIWPWbYLF4hpsLgotlJnBd72:2imsXxMq1ptbEGl8psRPj2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68202814a17354a1818ee73837221b87
Files
-
68202814a17354a1818ee73837221b87.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE