Behavioral task
behavioral1
Sample
65224e6a75cd79a60dfc35bcd90db210.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65224e6a75cd79a60dfc35bcd90db210.exe
Resource
win10v2004-20231215-en
General
-
Target
65224e6a75cd79a60dfc35bcd90db210
-
Size
90KB
-
MD5
65224e6a75cd79a60dfc35bcd90db210
-
SHA1
f2d6837553d4fac2706a774899ca7f94ea3f7b2d
-
SHA256
6060f87ee054277ae306720e6a24a093682fa94c9f6c2f0af528916c10b58867
-
SHA512
523f3554486836e9940da3eaca5fa97c4f0d7a91f368108306ef8601b1d93f9093796dc24b32ded46eef418fbe8d77d5e6910a2ae15e570809cd078c37e3a50a
-
SSDEEP
1536:wQX5KjkLQn/McGtD1bcwgvBgRwpwzyjTmOF0QvV2pEYKlVqBAIVmxTfgR:wTk8/Z21RRwpeOFvkWePSm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65224e6a75cd79a60dfc35bcd90db210
Files
-
65224e6a75cd79a60dfc35bcd90db210.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE