Behavioral task
behavioral1
Sample
673d25d07e10d67e13fc7c0f800a4898.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
673d25d07e10d67e13fc7c0f800a4898.exe
Resource
win10v2004-20231222-en
General
-
Target
673d25d07e10d67e13fc7c0f800a4898
-
Size
5.1MB
-
MD5
673d25d07e10d67e13fc7c0f800a4898
-
SHA1
982a36d2a93526c8a3ad4a3aa277807592032b3f
-
SHA256
962c1a42e941adc11c30e5c821cbf5e082ea7b77d01dd3ade5ef42e876efb27f
-
SHA512
b0abe9b53b581025e8a41a372a1521d8d6d617e2d80f143de65426b37ffd7e0c927343c4d0e627eae9450b58e51225f348aeb73bd0feab34ca226bff9a10daeb
-
SSDEEP
98304:sWoRVXpj7UQTzVGs3S11qronI0Iy5fKP7grvYLS3:eRVX6Q/8a0j9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 673d25d07e10d67e13fc7c0f800a4898
Files
-
673d25d07e10d67e13fc7c0f800a4898.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE