Behavioral task
behavioral1
Sample
65ca930b8409a1dc0d89a8e97a8e038d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65ca930b8409a1dc0d89a8e97a8e038d.exe
Resource
win10v2004-20231215-en
General
-
Target
65ca930b8409a1dc0d89a8e97a8e038d
-
Size
137KB
-
MD5
65ca930b8409a1dc0d89a8e97a8e038d
-
SHA1
0fd90d82d726c65758a15b49ae77c558b2d1d5db
-
SHA256
74e47281de460ec1f68b718ffffe304e658b1e7a1ff079ab61c67aba5fb41a20
-
SHA512
79d9624a9113ebb5e3ba5bab720d02610a09d81ad6eb6c681a38c08bb3c6c6e76b7031aab7436b31f60837fe6c48e5456aeb79f1c34ef2c87a3f986cbf2955f6
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53WW:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ca930b8409a1dc0d89a8e97a8e038d
Files
-
65ca930b8409a1dc0d89a8e97a8e038d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE