Behavioral task
behavioral1
Sample
70862b8121cb50a4878e90aced7b94d19e7e3f16787fb13dda21d65454aa33f3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
70862b8121cb50a4878e90aced7b94d19e7e3f16787fb13dda21d65454aa33f3.exe
Resource
win10v2004-20240508-en
General
-
Target
70862b8121cb50a4878e90aced7b94d19e7e3f16787fb13dda21d65454aa33f3
-
Size
2.5MB
-
MD5
e6e46bd554f632c0387112095b64a7e8
-
SHA1
3e1c5f690ba36eac6a85b3113a856dd127cc8201
-
SHA256
70862b8121cb50a4878e90aced7b94d19e7e3f16787fb13dda21d65454aa33f3
-
SHA512
f775b91492d26fded06600dbcc694e2871d9a9b82e8b34e88145f72cb8dc8b6fa90be5b7f971068091ee0008b9e18936a3f4b0fb77060feb28d1ec449bf8b575
-
SSDEEP
24576:xMmL+js+3Wvpw8x+UdNNBo44xS7LyAVnipiFVt8l76HNTe9BmTQk33hPCFdLWQkq:WmL+Z3Wvpw8x+UPMElH3tUvkhqkq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70862b8121cb50a4878e90aced7b94d19e7e3f16787fb13dda21d65454aa33f3
Files
-
70862b8121cb50a4878e90aced7b94d19e7e3f16787fb13dda21d65454aa33f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE