Behavioral task
behavioral1
Sample
648685e65169273f845f9e65332c2d25.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
648685e65169273f845f9e65332c2d25.exe
Resource
win10v2004-20231215-en
General
-
Target
648685e65169273f845f9e65332c2d25
-
Size
101KB
-
MD5
648685e65169273f845f9e65332c2d25
-
SHA1
0884f52768d67a78da76e4827420f3ef4276f530
-
SHA256
9fd109b456c3d3bbe491445078a6dcf86387b2c7f71450378f7b449829a2ee32
-
SHA512
9af6ff31d26ee554bafb80f939cfa56a72960ce2bb30c34ae5d09864d1d4a104640809265209e9bf1ce15a3d8bf9e2dbe579a403a3236a6bfb83e0ca815e3137
-
SSDEEP
1536:Gc0WKIUqdIAQDqIBuTJ3s6xyCME2piOrZ9XVI76QmZ31mxmkvPCZDPsUe:Gc0N8h6wJhxRapV199kKxsUe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 648685e65169273f845f9e65332c2d25
Files
-
648685e65169273f845f9e65332c2d25.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE