Behavioral task
behavioral1
Sample
66a5d0a34793f114d9d34a930d58f264.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66a5d0a34793f114d9d34a930d58f264.exe
Resource
win10v2004-20231215-en
General
-
Target
66a5d0a34793f114d9d34a930d58f264
-
Size
5.1MB
-
MD5
66a5d0a34793f114d9d34a930d58f264
-
SHA1
8165d765f2782b0b84530c4d2579816ba1fc54ab
-
SHA256
ab78fd0b56de7b80e5fef5ae42faab83551a2b978c47d9c094cec310abf1d8b7
-
SHA512
220ee9f9528a02330b0c9f33e96489c948801a33be36700c40c86d4a261f48de41d029175650bb08aacb9ad9de983e1e45757e7caaf0993daa03d6eae39e7f0c
-
SSDEEP
98304:c/N/oEFwe/Pb0Aw2wi9U3x1xj+X1qhj3:UNhh/Q2wBx+Uh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66a5d0a34793f114d9d34a930d58f264
Files
-
66a5d0a34793f114d9d34a930d58f264.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE