Behavioral task
behavioral1
Sample
667a9b984e17d58b702b05fe62bf33e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
667a9b984e17d58b702b05fe62bf33e0.exe
Resource
win10v2004-20231215-en
General
-
Target
667a9b984e17d58b702b05fe62bf33e0
-
Size
341KB
-
MD5
667a9b984e17d58b702b05fe62bf33e0
-
SHA1
c6cb2902e8d1347847844e89e881973f809ac8ef
-
SHA256
06734484ac8451a3b573a862d1a14aadc8a6c293037950e99267320eb5e2a2ca
-
SHA512
b8d99f1a5b32137bad0b5f4c59b09b0c37006034936a3153998495b7dd808f6f19414932c1ff4b94c45a66be5e512b85fa91a6467490215879251af9a962771f
-
SSDEEP
6144:hGSQUbKeG+z24NQnrs5KIpCRVu0DyXsfv2aiJdX+WVMTaB+5:hBvbK7q24NxdMR7LOhVY5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 667a9b984e17d58b702b05fe62bf33e0
Files
-
667a9b984e17d58b702b05fe62bf33e0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE