Behavioral task
behavioral1
Sample
65b61ff32bee9c14902c22c7a19e3158.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65b61ff32bee9c14902c22c7a19e3158.exe
Resource
win10v2004-20231215-en
General
-
Target
65b61ff32bee9c14902c22c7a19e3158
-
Size
3.9MB
-
MD5
65b61ff32bee9c14902c22c7a19e3158
-
SHA1
1f30045d6afb1985cbd738333e96faa5571e5d49
-
SHA256
0fafe54aa65a9fe11a3f61720436b8a5ee9dde54bced65b7e1bf6dafad83c8bf
-
SHA512
2b04c28b5b7502578fa8d8e8573f38056b72974307a7e4138ca50906439843eea611c13855f5d2393a4fa1e4f6de0cde55a14e46b9280f41e7050b0bcc7e989a
-
SSDEEP
98304:3rPyPromS+iVcakcibiqhMbMgOn7n0bcakcibiqhlrgC6OAqU4cakcibiqhMbMgo:bqPsmS7dlirybMgOnkdlirfgsRdlirys
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b61ff32bee9c14902c22c7a19e3158
Files
-
65b61ff32bee9c14902c22c7a19e3158.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE