Behavioral task
behavioral1
Sample
177468ef59c5058e2cf4bc202f46befb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
177468ef59c5058e2cf4bc202f46befb.exe
Resource
win10v2004-20231215-en
General
-
Target
177468ef59c5058e2cf4bc202f46befb
-
Size
1.8MB
-
MD5
177468ef59c5058e2cf4bc202f46befb
-
SHA1
25dbb56e264bab89c1ace438a08105791a7fd03d
-
SHA256
22d1123187fab031614cac9a565f38aa436958acfdc9a882fbd32d92b890e3d2
-
SHA512
2907686ff84089b54a4d239115f8c9ce051fef3ebdef2c986232410890a27edb809246b38287be37dfdef3246140eb46e77c141d1782124920b7178db0e2b728
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqC:SCqm2Jpr0nNM7Dus7Nx7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177468ef59c5058e2cf4bc202f46befb
Files
-
177468ef59c5058e2cf4bc202f46befb.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE