Behavioral task
behavioral1
Sample
65da0e5b75a7cb25edf6bb95d0356049.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65da0e5b75a7cb25edf6bb95d0356049.exe
Resource
win10v2004-20231215-en
General
-
Target
65da0e5b75a7cb25edf6bb95d0356049
-
Size
363KB
-
MD5
65da0e5b75a7cb25edf6bb95d0356049
-
SHA1
056de8935aff8ac238cf8047dc39b5519bbd2e49
-
SHA256
011aa2c49c4d43d4dedf34efa56c18b0cefa1142c8d9fb22ed30d5f0ce1ae712
-
SHA512
612d07659428a5b6bef9ac1d89528500bd479f6100cf612624e6b7301e05a47b0ded5eadc621cf32b2222ada30977d1e078407ab9263561599d24cf1c69f70f3
-
SSDEEP
6144:hGnQEO+xWcvsz0j1jb7bjSW3Ho2pbpIaHTn4/Z1VNA4kv09dplT43dHiVzmL/x+z:hQxMz0j137imHo2Zp9nAxtkgKHY+T4d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65da0e5b75a7cb25edf6bb95d0356049
Files
-
65da0e5b75a7cb25edf6bb95d0356049.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE