Behavioral task
behavioral1
Sample
621e818ee032b909fb332093390c83e835adb273e952b67aebc1f4daa6f29940.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
621e818ee032b909fb332093390c83e835adb273e952b67aebc1f4daa6f29940.exe
Resource
win10v2004-20240508-en
General
-
Target
621e818ee032b909fb332093390c83e835adb273e952b67aebc1f4daa6f29940
-
Size
1.2MB
-
MD5
830544ff6a7e21cbca02979a37ba3b02
-
SHA1
e696a47845e44feec1368e426d94ea31b71e5593
-
SHA256
621e818ee032b909fb332093390c83e835adb273e952b67aebc1f4daa6f29940
-
SHA512
efa6765ed804472dafe5d66e8837dc79a211e87d470e7f8d21277bc3bf64770721e7860bc99273d37ab891b34091d0668c06bdf9bcbc1aacc97fae9b663177a4
-
SSDEEP
24576:Olj7tqVEqvGRbCTk8IGkqHGMRNfqdjwxjfrjtIHXDy:Olj7tqvJnGCkjwJPtI3Dy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 621e818ee032b909fb332093390c83e835adb273e952b67aebc1f4daa6f29940
Files
-
621e818ee032b909fb332093390c83e835adb273e952b67aebc1f4daa6f29940.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE