Behavioral task
behavioral1
Sample
65f46524df65e06790ab0531ae9aa306.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
65f46524df65e06790ab0531ae9aa306.exe
Resource
win10v2004-20231222-en
General
-
Target
65f46524df65e06790ab0531ae9aa306
-
Size
9KB
-
MD5
65f46524df65e06790ab0531ae9aa306
-
SHA1
35a4cfd44fc895dc4c9db6bd7135fd9090297d3c
-
SHA256
f81801feab90e77d6e1143e790788860cf54c4f53fe38f92874db6e01702808e
-
SHA512
7e5b678a13652efab5481c6a4ffdb1b9e772aea96df8255e4e89281ba1aa6d05d4729b5ecfdf4011d0d61122af8b81938abf1a767b81f4c9ada0e5ef036e0676
-
SSDEEP
192:hubD6gReDwL/sexp+SIhUeSLjnbKIZvg3rfWbMbl:cig9Vf6KeajnvZIbfia
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65f46524df65e06790ab0531ae9aa306
Files
-
65f46524df65e06790ab0531ae9aa306.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE