Behavioral task
behavioral1
Sample
664a779b4c6704dff8bef48a32cb794a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
664a779b4c6704dff8bef48a32cb794a.exe
Resource
win10v2004-20231215-en
General
-
Target
664a779b4c6704dff8bef48a32cb794a
-
Size
5.1MB
-
MD5
664a779b4c6704dff8bef48a32cb794a
-
SHA1
b08ecacfdaa81cc0ab470c53d8969aaae24611d5
-
SHA256
7d99b8078ea85b35a40d5c61b9bbe0b8f80740e71cf26cdb327eaf8103c6d2ba
-
SHA512
7354372ace19429a3afeade4bfdc1774dd027685f113e950340405a8ce3ac487ae57a65cc7517ff3448678c8a9456a0e6b5e87f407a944696158bc0b20862ea2
-
SSDEEP
49152:oAP8V7B2oxexeqX4GUiYRPRuUVSb9leRay35bkrfg8FYri+ts5EjdZwaA9jCIFkr:58TE0t30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 664a779b4c6704dff8bef48a32cb794a
Files
-
664a779b4c6704dff8bef48a32cb794a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE