Behavioral task
behavioral1
Sample
668cf4000082345b14d4af726e8a982d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
668cf4000082345b14d4af726e8a982d.exe
Resource
win10v2004-20231215-en
General
-
Target
668cf4000082345b14d4af726e8a982d
-
Size
37KB
-
MD5
668cf4000082345b14d4af726e8a982d
-
SHA1
24962a0e50ad4b52bcccf13945b0f5183d925420
-
SHA256
e7a24c757197065207cdc2630b1e92a2b69b317f183d0363bf12ef14fdda72ba
-
SHA512
c83d4a72b6f890e353c483ce731e06b87c74b545bffbe68cdd0ca1b472f8066c84a5c719c7c48f67f5ead1920405ad7617b78d7527f8c7209a41b334f9dcb892
-
SSDEEP
384:/Tm4uBl9wtLui6ElmcjQ0tEXosiA670/d7Yw/XdvoVcN:/6NwtL0EEcjQ0L70VcIXdv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668cf4000082345b14d4af726e8a982d
Files
-
668cf4000082345b14d4af726e8a982d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE