Behavioral task
behavioral1
Sample
64cd5a9db2c3ca8954a611b7fdf61f80.exe
Resource
win7-20231129-en
General
-
Target
64cd5a9db2c3ca8954a611b7fdf61f80
-
Size
138KB
-
MD5
64cd5a9db2c3ca8954a611b7fdf61f80
-
SHA1
a40830ba0ab7692f22e40e999126e5af575387b9
-
SHA256
51043a2bab2490b9e9bcc652ac3ede97047c2cb42e2f820b4d36920ea307fd0c
-
SHA512
f4a80c077ef13015dd3638ba669154b5d1ebee74d9e9ef3038d936ebea7d7689cdf2c6b42e74e57bdacd9ef818fa5f5cf7f66b3e3e43d0681c5cf9c04c80bb51
-
SSDEEP
3072:3m1PNBVq3ejI9LCQ8t+n5SbpVBdDHjKSxH+vo0ksfoutevH:3msiyGlt+5SzDDKSxHQo0kCoSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64cd5a9db2c3ca8954a611b7fdf61f80
Files
-
64cd5a9db2c3ca8954a611b7fdf61f80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE