Behavioral task
behavioral1
Sample
64e0f501b87d884c1d9cb2538e663d62.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64e0f501b87d884c1d9cb2538e663d62.exe
Resource
win10v2004-20231215-en
General
-
Target
64e0f501b87d884c1d9cb2538e663d62
-
Size
5.1MB
-
MD5
64e0f501b87d884c1d9cb2538e663d62
-
SHA1
0c25fd100734086ba0e0747a8f6e255a1d9ff5a9
-
SHA256
e717d2d106c6959672ae8736af7d299fb0e66a2c90f57c93f1e0c43557c89005
-
SHA512
b05550417a732c1b6384078fe91f9cc5411d1444f2d8927147b1c510bdec42c0d5eef93c0d262e54209463e03393250248e55eea9d9abc869eb88b14cda6f917
-
SSDEEP
49152:7T3WgQhpl5i8ioW19/ZgODrNWF2hSQg/ay35bkrfg8FYri+ts5EjdZwaA9jCIFkr:H3z/P6lh30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e0f501b87d884c1d9cb2538e663d62
Files
-
64e0f501b87d884c1d9cb2538e663d62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE