Behavioral task
behavioral1
Sample
66c2cc59869b22aca83a489faa8e453a.exe
Resource
win7-20231215-en
General
-
Target
66c2cc59869b22aca83a489faa8e453a
-
Size
784KB
-
MD5
66c2cc59869b22aca83a489faa8e453a
-
SHA1
6ac5d2b5462cefee4ed19ecc02720091c71b8042
-
SHA256
0b6a515b72b17c7682af4f8fb1b2c1ca9c3332df0efaa2cad1614b25494a693d
-
SHA512
0a77d3591703faef136c655870ae7202ece5822d8714883b4e24154ea9b744a18fab90c89cc6b40058c5fdcdeddfe1861643b8e56a487a45c0837977a006b5b0
-
SSDEEP
12288:IwoEm/UGxvPU8nOtX56dikFNhbaT8Gd4oGed9lMrxwOPiZ5w48cz3wolrU68dWAB:sEmZkS9baTl2I9lMNJqpLBrU68dW0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66c2cc59869b22aca83a489faa8e453a
Files
-
66c2cc59869b22aca83a489faa8e453a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE