Behavioral task
behavioral1
Sample
65d3219328253af28a2eefbe7b252169.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65d3219328253af28a2eefbe7b252169.exe
Resource
win10v2004-20231222-en
General
-
Target
65d3219328253af28a2eefbe7b252169
-
Size
458KB
-
MD5
65d3219328253af28a2eefbe7b252169
-
SHA1
f6913235d255e1327ad3f0994caf0d5f62c239eb
-
SHA256
fbdb7334341ca6c73a81d3cb540f0190b9261cccabb44286819b12778838d19d
-
SHA512
f7bb8a46eb285c1e742293de42857818fa1af1c51b06e99c27c991338b7b3e789cd02cfbfb760aeced908238d6a7d124fb3284f98849a96061b326bc235cee4a
-
SSDEEP
6144:Ez1n+YgkEq5NVQKzHMiLDH9riSRLigC9C0Z0+HLJoZTEQtxcJi+:EB9VEq5NvjFLgtgC9C0yoLJKxEZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d3219328253af28a2eefbe7b252169
Files
-
65d3219328253af28a2eefbe7b252169.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE