Behavioral task
behavioral1
Sample
70bbe03dbac0d71087710bd24a60c3b0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70bbe03dbac0d71087710bd24a60c3b0.exe
Resource
win10v2004-20231215-en
General
-
Target
70bbe03dbac0d71087710bd24a60c3b0
-
Size
51KB
-
MD5
70bbe03dbac0d71087710bd24a60c3b0
-
SHA1
f62b77f2fb6aad9743014aa71c2eebc47f335c04
-
SHA256
21f9046d6a7c453e9350d52c117c18606bbd51fede8c8221fb3b734b1cada620
-
SHA512
7202282f45e6685d06c8651cf5c7c17301825668059b1b4ad9fad717cc52e97d8668a69c0c0b8605a392d581159c52619305a5fb11b471eeb64c3c28c6cbb4ad
-
SSDEEP
1536:QenNFYVPUYSWNz4yESVnouy8DBRDpq4OZZZLlk+ibX:E5Ua4yEgoutFRDf8kbX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70bbe03dbac0d71087710bd24a60c3b0
Files
-
70bbe03dbac0d71087710bd24a60c3b0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE