Behavioral task
behavioral1
Sample
65628c08fadee7c1c94bbf36c286b305.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65628c08fadee7c1c94bbf36c286b305.exe
Resource
win10v2004-20231215-en
General
-
Target
65628c08fadee7c1c94bbf36c286b305
-
Size
5.1MB
-
MD5
65628c08fadee7c1c94bbf36c286b305
-
SHA1
4aba651bbef2f1f29b8d81f6eccca05e4b9d7f2d
-
SHA256
348cb462ec47a545b1be6b00e32f9f13482883987649b25ef5ff0ef2c0acf83a
-
SHA512
4d1b6f2e297385a0cd7980c7e25db12d96ca2b386d7375974e267baa263e1de377778bff573df985f69190a8fa6a2637f7fcb966166bc6d8f57e962fc53ba81f
-
SSDEEP
49152:GL74X7Mfij7TjUcHRy5jSVvfpEm1MpqvDGgjiMTay35bkrfg8FYri+ts5EjdZwab:3TfZmjWZrd30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65628c08fadee7c1c94bbf36c286b305
Files
-
65628c08fadee7c1c94bbf36c286b305.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE