Behavioral task
behavioral1
Sample
60f0a5b62fe6e287f2a3d78691cf6c95.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
60f0a5b62fe6e287f2a3d78691cf6c95.exe
Resource
win10v2004-20231215-en
General
-
Target
60f0a5b62fe6e287f2a3d78691cf6c95.bin
-
Size
198KB
-
MD5
60f0a5b62fe6e287f2a3d78691cf6c95
-
SHA1
7f0f955c86bce856905a2175c50fea26bdea6190
-
SHA256
8439e6380da4f19245853e8c4f64694113caabd1e19b029faa487df8f24f3020
-
SHA512
f51eb8a828076b2340abebeafe52bd7fe68366dbe644ba99f7c9e0162aeee5449784d2e0bb85effbd09e4128e761d1a01d23b3e5a3b993601a335ddd1475db27
-
SSDEEP
3072:dLeZUwofc1zU9KUgshNIFfF7eO+blJULGaMl1+jhh+PaWY3P2lmWtoutA7Q:pXw5MK1shNIFfFCULGvU+3VlBtoSA7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60f0a5b62fe6e287f2a3d78691cf6c95.bin
Files
-
60f0a5b62fe6e287f2a3d78691cf6c95.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE