Behavioral task
behavioral1
Sample
062fd7ab207801b6df8f77d7be4d8281.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
062fd7ab207801b6df8f77d7be4d8281.exe
Resource
win10v2004-20231215-en
General
-
Target
062fd7ab207801b6df8f77d7be4d8281
-
Size
10.2MB
-
MD5
062fd7ab207801b6df8f77d7be4d8281
-
SHA1
b952c70e0b3c0a1657f1307e13d92ffe4fbeeb8e
-
SHA256
3ed2a643d402e89d2c6514b6cd5970b6b2fe59f307545bba87659bf058a3884d
-
SHA512
745522478ac76c8d7a543a101f9d0cceb2192d6982fd4ee5f5fc3e9dbeb11985144bde6d3e13ad2732a4ebe72110b6bc6cdef6bb4259fe704aa5f556a479495e
-
SSDEEP
98304:WlS7PHz3F/+y3KZliaQs9G/3iqkmWta3ZPpOIS3KZliaQs9G/3:4S3s8u9GfkmWApUIn8u9G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 062fd7ab207801b6df8f77d7be4d8281
Files
-
062fd7ab207801b6df8f77d7be4d8281.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE