Behavioral task
behavioral1
Sample
67efcb65959491a8a0f5dde690585ebd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67efcb65959491a8a0f5dde690585ebd.exe
Resource
win10v2004-20231215-en
General
-
Target
67efcb65959491a8a0f5dde690585ebd
-
Size
5.1MB
-
MD5
67efcb65959491a8a0f5dde690585ebd
-
SHA1
72ca2fae6781e600b628e617bde9155dd5c63d1f
-
SHA256
87a49791c573040a7a26f34e00405ccb0aa8d753fc87df0f7629e83cfd800f31
-
SHA512
928dd3bc63fa050bec9d2b26dcc7592a0ff66c644c1b964570b653f1c17e37671c3c37f49f361e61dd80720b9a2c9039e4f126a6c70fdd906df3300c38575e08
-
SSDEEP
98304:d+v5ZiXjF9EWy1t3n8nhnvb2xVCBldPX3:Yv5ayn1WnBb2bCB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67efcb65959491a8a0f5dde690585ebd
Files
-
67efcb65959491a8a0f5dde690585ebd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE