Behavioral task
behavioral1
Sample
70801f3fe19a6fb229a666aebf8dec73.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70801f3fe19a6fb229a666aebf8dec73.exe
Resource
win10v2004-20231215-en
General
-
Target
70801f3fe19a6fb229a666aebf8dec73
-
Size
29KB
-
MD5
70801f3fe19a6fb229a666aebf8dec73
-
SHA1
36a479ecdfbcee159e23c7cd3f0dfe7f90bf85bd
-
SHA256
a2bbdf7ff5bde576e40aacdf7d6cf11e4381dd024d455f5a00233af4c5b35d03
-
SHA512
b07e4bff7388092da65fde355d1ebdbcf01ea67683e8a3d063127d8572597e1924e36df84cae874a4bb3a2781dca407ebf3b56c8593e261865cceb4a8b7b95a1
-
SSDEEP
384:G9vTR0/K+CZnG86kFygMn0B6KjJyt51HCm4pgyOv68tmQKzCCLroVy04b/CtwW27:0ReK+YxkpWjJyFi7zq3KmEwICOW27
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70801f3fe19a6fb229a666aebf8dec73
Files
-
70801f3fe19a6fb229a666aebf8dec73.exe windows:4 windows x86 arch:x86
ea265e1fce9405dac4cbb1b5b8867377
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_tell
_tzset
_umask
_rotl
_spawnl
_stat64
kernel32
GetNextVDMCommand
GetDriveTypeA
GetStdHandle
GetSystemInfo
GetVersion
GlobalAlloc
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE