Behavioral task
behavioral1
Sample
75f3160766a7de66f521fb5e79e9bf0c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
75f3160766a7de66f521fb5e79e9bf0c.exe
Resource
win10v2004-20240319-en
General
-
Target
75f3160766a7de66f521fb5e79e9bf0c
-
Size
769KB
-
MD5
75f3160766a7de66f521fb5e79e9bf0c
-
SHA1
8c0acc261ecea9f2c6dc3d6f2a703ac94c247fec
-
SHA256
3394dfede283a3ae7006f71886453bae563663edb8ed0328ade3326682c505ae
-
SHA512
c7686c3605a5fa7d13ea169ff9184ba49531c02a30574ebcdb506432ef66a24683574cfa822ce332c0099cdf78c346062718f79a43e0aeb551ae2b25884efd15
-
SSDEEP
24576:YoY4FlXqQuWEzCueA6jUZTHv1zUiqDjU1+Kpqe73Ct:XXFlXbEzaA6QxUiqoqr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75f3160766a7de66f521fb5e79e9bf0c
Files
-
75f3160766a7de66f521fb5e79e9bf0c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB