Behavioral task
behavioral1
Sample
66b8ce6d1a2ee4db41a74a560b070df3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66b8ce6d1a2ee4db41a74a560b070df3.exe
Resource
win10v2004-20231222-en
General
-
Target
66b8ce6d1a2ee4db41a74a560b070df3
-
Size
126KB
-
MD5
66b8ce6d1a2ee4db41a74a560b070df3
-
SHA1
f43e78fb04d19c5b0845464b05b201bf12b221c2
-
SHA256
88a1ef9c5eadaf6da1a9e28cbbc847f21f2bab73ab409151e39460ccbe2b8bac
-
SHA512
544c73c595dfd421836703e7d900f9cab55f118a8b2d7007fe683a94e1b213b18232c1aaec5cd79d647e860dfe4bfec9687b61d3587d36a1ec1cf3ee9f9cd2db
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3G7PRBDUx3CC32Pw5qeK7qql+VR/kow:hGyGG7PRyxSC3OnJ+R8f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66b8ce6d1a2ee4db41a74a560b070df3
Files
-
66b8ce6d1a2ee4db41a74a560b070df3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE