Behavioral task
behavioral1
Sample
0610570d39bbd1cdb9deba4413ebaae0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0610570d39bbd1cdb9deba4413ebaae0.exe
Resource
win10v2004-20231215-en
General
-
Target
0610570d39bbd1cdb9deba4413ebaae0
-
Size
335KB
-
MD5
0610570d39bbd1cdb9deba4413ebaae0
-
SHA1
1e4eb7d579d7358a59f47872a2c2a89b119624e2
-
SHA256
2dc7b1f0d1e4f9a701faf79505a9b0928cece3d7f19a115f6b67c4557e3f091c
-
SHA512
3254d52ff6c63a11a92a72e1415ef48a1dc7b233eb5950b2f52521e0a85cfb03f90880627b527b129ba70485b20aced098f74ba7fd4338af6ae3fa2398d5c394
-
SSDEEP
6144:hGwnNHN6DNDXUNP8TaY5Vs7FNL4XJ/T/+dOoLvd0PIofZPg/MdU2LACS:hZNt4tkWTaee7FN8XJ7/+dOu0PY/ozL0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0610570d39bbd1cdb9deba4413ebaae0
Files
-
0610570d39bbd1cdb9deba4413ebaae0.exe .ps1 windows:5 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE