Behavioral task
behavioral1
Sample
566460d77061b354c8c0604a6669aa0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
566460d77061b354c8c0604a6669aa0b.exe
Resource
win10v2004-20231215-en
General
-
Target
566460d77061b354c8c0604a6669aa0b
-
Size
518KB
-
MD5
566460d77061b354c8c0604a6669aa0b
-
SHA1
8f00e787009a999b4779201c515145fcbb8aa579
-
SHA256
f809349f8786986f57fcf92b1de16f728fc096add47b7d914e2d830998da8c14
-
SHA512
6dd54e962910fbbf5ac7bd850a574cbd93fc97af074f0e1b926a7481ccc2cbe47541ff6da4a18e09e7c94d4e20d7c29856a46185bb2603620a967f1aae49a65f
-
SSDEEP
12288:u2xx1R2vSMQO3Q/YxXKee5HjmkW74TcIr+Y5p/j8HLPvjHev:u2vMQr/YWBU4TjqApLGf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 566460d77061b354c8c0604a6669aa0b
Files
-
566460d77061b354c8c0604a6669aa0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE