Behavioral task
behavioral1
Sample
645c193c125471814157fa217447b71e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
645c193c125471814157fa217447b71e.exe
Resource
win10v2004-20231215-en
General
-
Target
645c193c125471814157fa217447b71e
-
Size
133KB
-
MD5
645c193c125471814157fa217447b71e
-
SHA1
aa626fcdac698c62eacca3b82a0b922a67cf5a97
-
SHA256
19142509836e513a6ff4e14c58bc62cc753217c40abbce6a2ec063842add0dc4
-
SHA512
5d42a170d918c045e14a9f2bca40b5478eae210d3abe43a0a36964e53a5c6a382a1146a579dc50aa6bc57f8b47530304bc792b9ef15cb488bc429acbefe80078
-
SSDEEP
3072:ZLbkPG75YE9nzyZAZP+Ams+le6Xk34fjV6Qz7NvuXSPfEiNqElYpivQ:ZnxuE9n9nr+E6UoV9z7NvUkfqElYgvQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 645c193c125471814157fa217447b71e
Files
-
645c193c125471814157fa217447b71e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE