Behavioral task
behavioral1
Sample
62116095e69f86ac6c3499fc7639f1dd5f4b2eb4a3138152b1c8a818899f7329.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
62116095e69f86ac6c3499fc7639f1dd5f4b2eb4a3138152b1c8a818899f7329.exe
Resource
win10v2004-20240226-en
General
-
Target
62116095e69f86ac6c3499fc7639f1dd5f4b2eb4a3138152b1c8a818899f7329
-
Size
3.4MB
-
MD5
c0d271efb25bf68281a20ed00f49ede2
-
SHA1
3a3b4906f732c40d32f65006bb61cace0d814f61
-
SHA256
62116095e69f86ac6c3499fc7639f1dd5f4b2eb4a3138152b1c8a818899f7329
-
SHA512
5c078e9f46104d4e1b6a362dd72584617dc3321d6ada81d87fa2ea7c06bf409d00e49eb0bfaafed62b49a48bdcc58cfd0dd730b06442617541ff202b97cf0f7e
-
SSDEEP
98304:oi+vDPlPGzHt4yl74JaLUQ/UZ+y1zPMblmOzR4:l+vDP9Gz+VaIQ/Q+rx3S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62116095e69f86ac6c3499fc7639f1dd5f4b2eb4a3138152b1c8a818899f7329
Files
-
62116095e69f86ac6c3499fc7639f1dd5f4b2eb4a3138152b1c8a818899f7329.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE