Behavioral task
behavioral1
Sample
68ce0e7962fc3b508130e4f267289c08.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68ce0e7962fc3b508130e4f267289c08.exe
Resource
win10v2004-20231222-en
General
-
Target
68ce0e7962fc3b508130e4f267289c08
-
Size
1.9MB
-
MD5
68ce0e7962fc3b508130e4f267289c08
-
SHA1
5173687070367296aa4a58700f6947227429afc7
-
SHA256
08d51c0ace3d805ea621d71a35d130a9f5603945164960cd45dbc290cb8be2a0
-
SHA512
145b047c2ce4623a221c5ec0d78c5d08408c5324e468141c07c1e6b84ab77f6d583db0cb7ce2c4d5385690d5709d3de21cab0881fdaed261da78187db5f5c248
-
SSDEEP
49152:HF4eSS8FPx2dplXQc0k7yo5758hBd8x0zy3F0DLyHNSuZX2SAQ9:HeeSHF52dplXQC7yoJaPd8x0zy3F0DuS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68ce0e7962fc3b508130e4f267289c08
Files
-
68ce0e7962fc3b508130e4f267289c08.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE