Behavioral task
behavioral1
Sample
245cbaaa68360ceb97cf727d639eb3b3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
245cbaaa68360ceb97cf727d639eb3b3.exe
Resource
win10v2004-20231215-en
General
-
Target
245cbaaa68360ceb97cf727d639eb3b3
-
Size
1.8MB
-
MD5
245cbaaa68360ceb97cf727d639eb3b3
-
SHA1
37b9c1c73b3f2d4d9d52791b0f64fa1d7e4bed22
-
SHA256
75507916999ec232caaaeba82bfc23d1f01544f9fe3ff9cdeacdcce0eaacb7a9
-
SHA512
2a5e0539c909969b0c3e1e2836b4392c06ae7cab75c4cdf09d8fcceafbb33c36247af891b0e7c44af1e0491c77661d7aa7d741757e2bad42e3f7d703814c60a2
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqs:SCqm2Jpr0nNM7Dus7Nx1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 245cbaaa68360ceb97cf727d639eb3b3
Files
-
245cbaaa68360ceb97cf727d639eb3b3.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE