Behavioral task
behavioral1
Sample
64e5828edaaab19a9459fd8e736f1686.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64e5828edaaab19a9459fd8e736f1686.exe
Resource
win10v2004-20231222-en
General
-
Target
64e5828edaaab19a9459fd8e736f1686
-
Size
19KB
-
MD5
64e5828edaaab19a9459fd8e736f1686
-
SHA1
6b8a338256035ec8d3f324329f02ea8025d64b23
-
SHA256
af4fa93fd2ee9d1ae17b13dcb3d41687de5bf4a634bb0b7ee5325d3feb14cac9
-
SHA512
d581892779650b541dd6f7cd54e430f85c0884a91f32cec15647507db3a2f6f3b2b8d5ef26174979fdbf55071c455e9aee3c5864d3a71a6f5855d4f0d6a3d441
-
SSDEEP
192:/goW2+O1Z4nfHFXE88dc1O5kZ6fTKMzu5uE1raoNTaMQE15MD1F2LlJZCDqB5q:65OyHFRNNZ6fFzu8E1OoNTyRFAlvCAq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e5828edaaab19a9459fd8e736f1686
Files
-
64e5828edaaab19a9459fd8e736f1686.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ