Behavioral task
behavioral1
Sample
24994fb0806628d7fadb47fcbbc4d40b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24994fb0806628d7fadb47fcbbc4d40b.exe
Resource
win10v2004-20231215-en
General
-
Target
24994fb0806628d7fadb47fcbbc4d40b
-
Size
6.9MB
-
MD5
24994fb0806628d7fadb47fcbbc4d40b
-
SHA1
cd2e0e5481cc3e5c34674579ebb4f2725c9dec9b
-
SHA256
5aebc3c056c74b9ce0b413000bc91f54ce98dec4c22aba04139dcf793baac095
-
SHA512
e06b4af71fed1dcc6045091f209ed37b6fbe7856c613e3b8e115df2d7bb9ebdde7164bb27b42697735fcd406a4a242f1754bcb5b229170983c0475426836fc8a
-
SSDEEP
196608:lPiCsXDjDyf6L2WliXYrHW1nb+19uru/KzLV1R:lPiCEDVL2ciIrHW9C6CYp
Malware Config
Signatures
-
resource yara_rule sample upx -
Detects Pyinstaller 1 IoCs
resource yara_rule sample pyinstaller -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24994fb0806628d7fadb47fcbbc4d40b
Files
-
24994fb0806628d7fadb47fcbbc4d40b.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Keylogger69.pyc