Behavioral task
behavioral1
Sample
65f2db5e3b1106f4199e97d27523d014.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65f2db5e3b1106f4199e97d27523d014.exe
Resource
win10v2004-20231222-en
General
-
Target
65f2db5e3b1106f4199e97d27523d014
-
Size
308KB
-
MD5
65f2db5e3b1106f4199e97d27523d014
-
SHA1
ceab4507d7f3928ae6a16e62e7687ec51e1e7b6b
-
SHA256
7fb42aa046e609fea1e2619140984a2f5b2afd6204505e85608dc9338d20ac3b
-
SHA512
30c662074936490fea111e86f85676e39297063d10dc21a84f13683ffdfd2161a02443b8f5ce25ca480b530b73d5cbc2b7e780eb48b9a3c99f37223bee202141
-
SSDEEP
6144:f60yLW4Z/OiwEdzFduwv/QVXbRfzEesSksOW7vQ6gS5IzVRD3OfoS:f60ya4MEdKNf/sDsOW7vQXS2zVRD3OfZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65f2db5e3b1106f4199e97d27523d014
Files
-
65f2db5e3b1106f4199e97d27523d014.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE