Behavioral task
behavioral1
Sample
745cef22bbab5cfe53d5e75d7d18e33183a19f95c24036194a39661bf5d60cf4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
745cef22bbab5cfe53d5e75d7d18e33183a19f95c24036194a39661bf5d60cf4.exe
Resource
win10v2004-20240426-en
General
-
Target
745cef22bbab5cfe53d5e75d7d18e33183a19f95c24036194a39661bf5d60cf4
-
Size
4.8MB
-
MD5
2c6d885a82ee58b87742ce7086f8f0dc
-
SHA1
7ac9955b40e536d6f92c92f2c1c66c1cc87ba662
-
SHA256
745cef22bbab5cfe53d5e75d7d18e33183a19f95c24036194a39661bf5d60cf4
-
SHA512
3f68a37aef5a8e808feef89153dfa5d8aaf157890de32b7bfe2afe0628b4525809928af0170dbc9ff024d66ab333ca40528cd9c3853ad03e03eed1c18c0588e6
-
SSDEEP
98304:mcedUiLxjpI8LvEdEGQf0K97s6LRoJQTGMi8pl6Sl/FWHO:mM4zLqfpOV2qTRP6SHEO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 745cef22bbab5cfe53d5e75d7d18e33183a19f95c24036194a39661bf5d60cf4
Files
-
745cef22bbab5cfe53d5e75d7d18e33183a19f95c24036194a39661bf5d60cf4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE