Behavioral task
behavioral1
Sample
686e3446b8118dd14e8eac85511d150a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
686e3446b8118dd14e8eac85511d150a.exe
Resource
win10v2004-20231222-en
General
-
Target
686e3446b8118dd14e8eac85511d150a
-
Size
533KB
-
MD5
686e3446b8118dd14e8eac85511d150a
-
SHA1
5d7109520b4315b6fc00d2e3db46051f0970af71
-
SHA256
0fe0a278e838a7e3d8c08d0c6a301eef5405518f379f047be87e06fa5f61a8cc
-
SHA512
dd2bba7e179e5ddd79e4ef79ed0766019fbb176e1c4351b9f9be01945728aebb0d57916d96f68e002ae4d46228a2a4893e685f51892288d491bb8c2718b679f1
-
SSDEEP
6144:7+93B2MgZV67j7wOqlscKsscHFCWVoxF8ddHZjixx31sW4Sq3JpccDGY7:7+9gMMV67jngBaFsZjqFsWmdP7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 686e3446b8118dd14e8eac85511d150a
Files
-
686e3446b8118dd14e8eac85511d150a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE