Behavioral task
behavioral1
Sample
64dd1ffd2e3e3d5e287058b6b63b1e29.exe
Resource
win7-20231215-en
General
-
Target
64dd1ffd2e3e3d5e287058b6b63b1e29
-
Size
2.8MB
-
MD5
64dd1ffd2e3e3d5e287058b6b63b1e29
-
SHA1
96cf9927bbe8396025b5b61ac1e74c53eccbf9e8
-
SHA256
0bdf40d174cdd6da817626ba5cdefd1d8ba972825720fd839851e8436108395f
-
SHA512
c4969233d0f354d7367dffdbd1f25d07ce18f1322a66a36c61c400b0a30b2f8e75378673e1449b1886968699027cc732b4eabfedbdbcc1dfda41dc646b704f60
-
SSDEEP
49152:z8zCMDSgiCTrB+g880ublkz22uZTQfUxRDx1uAP5mmMy10Tyv:I2MDSD0B188zb1N3b1T5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64dd1ffd2e3e3d5e287058b6b63b1e29
Files
-
64dd1ffd2e3e3d5e287058b6b63b1e29.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE