Behavioral task
behavioral1
Sample
064ef3f635570985d1082701e0ef8bc8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
064ef3f635570985d1082701e0ef8bc8.exe
Resource
win10v2004-20231215-en
General
-
Target
064ef3f635570985d1082701e0ef8bc8
-
Size
324KB
-
MD5
064ef3f635570985d1082701e0ef8bc8
-
SHA1
50083a09d73440077c8902d079049f2270b8be85
-
SHA256
ab6adf7819c99167a268bae37868348d17f942740bbc5f58baa60efbee1aa0fe
-
SHA512
6702909d4b15f8c1170f8a6c1a01ca6c6f5d2ba4c18232f9721b3544f57d0e7a96ad652c1bda9662b130ce2a6fefea69fd12f8f99a6386a966c16a862d697192
-
SSDEEP
6144:/sJaCAiqleqaeAleXDYRrVSzAkkDsBtmiOijPpIyxr8Bs:/skblzA0URVSzZHmKPTr8m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 064ef3f635570985d1082701e0ef8bc8
Files
-
064ef3f635570985d1082701e0ef8bc8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE