Behavioral task
behavioral1
Sample
68194c8889b08685dfcacc616c661ead.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68194c8889b08685dfcacc616c661ead.exe
Resource
win10v2004-20231222-en
General
-
Target
68194c8889b08685dfcacc616c661ead
-
Size
79KB
-
MD5
68194c8889b08685dfcacc616c661ead
-
SHA1
a98aecb02f38dc625a39b6e9b135b34d770a2f93
-
SHA256
150bb1fc4efda2693a9e9d19569faeef8d19a93992121ba334e3e9700e3f912b
-
SHA512
e905fd3aad19bc81479e11dc52594c18b4760c63a0863e9aa4698346b8a8ff9e7a2c873a2fe575ed82388bad5b2561aafd98642079e35c6b911243a5827d3c1c
-
SSDEEP
1536:jg8CFtCjQUlHCALJDlJcS6uG0JZWc/joqU/TRVPPeDnXSKnnouy8H8aOaLCB:ynCjQU8TYD7f7oqgeDnCKnoutH8aXI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68194c8889b08685dfcacc616c661ead
Files
-
68194c8889b08685dfcacc616c661ead.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE