Behavioral task
behavioral1
Sample
666a1497e73617ad02d0f0e87ca37e3f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
666a1497e73617ad02d0f0e87ca37e3f.exe
Resource
win10v2004-20231215-en
General
-
Target
666a1497e73617ad02d0f0e87ca37e3f
-
Size
333KB
-
MD5
666a1497e73617ad02d0f0e87ca37e3f
-
SHA1
7510c474e07ddf6ec1557ddcf7d2a20252914383
-
SHA256
7e7c00966fb59e5cf1f5fb904b987f6b2b306cf4f0f7c6b8ea7a4ae3614dfde8
-
SHA512
2bb42ce0e0fb124f6a2777586b44744389d3da04447897efffcd89730b002c6b3c0c9cee06fd04dd2ba57a4055010e851d506a1edca036cb2709410c939c6366
-
SSDEEP
1536:Y+f3yvot5ndCQVKUAJctMNCRFzpY+BPUdp1yq7upD43kXlqooXB7dlxC0:4v8xkbCRFzC+Er37upE3kXlilD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 666a1497e73617ad02d0f0e87ca37e3f
Files
-
666a1497e73617ad02d0f0e87ca37e3f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE