Behavioral task
behavioral1
Sample
642e57fbe80ead958d0556a19d6c0cfd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
642e57fbe80ead958d0556a19d6c0cfd.exe
Resource
win10v2004-20231215-en
General
-
Target
642e57fbe80ead958d0556a19d6c0cfd
-
Size
159KB
-
MD5
642e57fbe80ead958d0556a19d6c0cfd
-
SHA1
eb26190b9169e155ba556960ccd0e8c4d4ecb97d
-
SHA256
6940fd12c37de9c9efc653c98fd504a1a6f8cdafeaa9c57bbd5d8bec4d9aa5cb
-
SHA512
5edf6ed379f969498f70577cfd8dbdcff9e50fa140efb24d5981aed2da78f9c8dd554a7269f3a0bc2203320020c9e8eb7d7600f41788ede011e3e9e0c281e938
-
SSDEEP
3072:Sz6bEbOysMG8xx7GSXhSV+xhpVtN08Cc:SzNJsMG8xhGehSV+PpTN08
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 642e57fbe80ead958d0556a19d6c0cfd
Files
-
642e57fbe80ead958d0556a19d6c0cfd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE