Behavioral task
behavioral1
Sample
68bbdb323608aea7d3b72d9a4983de26.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68bbdb323608aea7d3b72d9a4983de26.exe
Resource
win10v2004-20231222-en
General
-
Target
68bbdb323608aea7d3b72d9a4983de26
-
Size
139KB
-
MD5
68bbdb323608aea7d3b72d9a4983de26
-
SHA1
02a0c2e4ae1d8de4f0e8b8dfb5317db051095789
-
SHA256
e4abcbd8855fea342b8d83be3f625890a53163e91dbc78b4422deabe1e3bfc6a
-
SHA512
0f95e9e224a23bd4e4c34b565c5d5d659d96682bd05284924698f0beb26f47436d78bd02df868d6bfac87ea282e8068288d670ebb9e66fac22bb741d6592f4bc
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68bbdb323608aea7d3b72d9a4983de26
Files
-
68bbdb323608aea7d3b72d9a4983de26.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE