Behavioral task
behavioral1
Sample
662cfbbf6f45bf4980d0f43950722efc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
662cfbbf6f45bf4980d0f43950722efc.exe
Resource
win10v2004-20231215-en
General
-
Target
662cfbbf6f45bf4980d0f43950722efc
-
Size
1.3MB
-
MD5
662cfbbf6f45bf4980d0f43950722efc
-
SHA1
4a0bcbd1091f75c3b56b00380d970cc6597fd068
-
SHA256
94c90d762ccbc4a0ee412995c09ca2bd3d16df62e9665593501fbc0fd9640e97
-
SHA512
038aabfe653820eb94e6bf5a0e2cbe83fdb2667ac4748c95c59ffa729cfa9d92d09bb05b39ce497e46838a0f6292aa258a764e9e09270a65d24302d625af4c83
-
SSDEEP
24576:nMyAizMhk19v418/h8CxXlCiP/zZaefqd3e8yNO83a23WLb2QZbSXvxMUE9:nMyAfo/h8y1CiPbPqjys8XCb3ZbUZA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662cfbbf6f45bf4980d0f43950722efc
Files
-
662cfbbf6f45bf4980d0f43950722efc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE