Behavioral task
behavioral1
Sample
70940c197e34ef248df24fb59b40a893.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
70940c197e34ef248df24fb59b40a893.exe
Resource
win10v2004-20231222-en
General
-
Target
70940c197e34ef248df24fb59b40a893
-
Size
5.1MB
-
MD5
70940c197e34ef248df24fb59b40a893
-
SHA1
925cb70442be2b1318950a2eb7a6bf5a172d570c
-
SHA256
6b17d3ad27ef019de4d18ee497ab05cd8809b910d2be09ab4232824d021bbbfe
-
SHA512
78cf9c0613b10ce6ac5aac23f1c4f4435c319c4e2a24ecfe349b6466bd6868ae9302dea8571ce2cdcc7c9fd4f21d35953eb7002c5517c389074564aa5578fff3
-
SSDEEP
49152:HvxDIKtkcPNR/BtmiSDBtFEU/1o9lgigemnxjvuBRray3E6BmrDcbgTSSzjjhekI:pDtNB7QNKT3RBmPc0LnaJsGx3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70940c197e34ef248df24fb59b40a893
Files
-
70940c197e34ef248df24fb59b40a893.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE