Static task
static1
Behavioral task
behavioral1
Sample
60a75fa7851758e5b13abc23723b5627537e6cabd2ea1d1a8f9d3066ca54aa0e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
60a75fa7851758e5b13abc23723b5627537e6cabd2ea1d1a8f9d3066ca54aa0e.exe
Resource
win10v2004-20240508-en
General
-
Target
60a75fa7851758e5b13abc23723b5627537e6cabd2ea1d1a8f9d3066ca54aa0e
-
Size
1.8MB
-
MD5
f62c8097b45851f09117dc19dc708c21
-
SHA1
460458d4904f4728c6473a761b864146964fe018
-
SHA256
60a75fa7851758e5b13abc23723b5627537e6cabd2ea1d1a8f9d3066ca54aa0e
-
SHA512
ba1b3785eb64772f4ab7e159467d87bfbd0e9f968cd3069493420e7746a76a96a486b08261d4ba0b4e267d2d630bf7e98c43541a1cacad887015551dd74c6c2f
-
SSDEEP
24576:62tYIc3Wfp4/6TzUTIM0akQ/IeA6sbQSvHF6+Gsa64P0TQFZ8gOO8KpL0:6RWI6THM0Kwe8cSvO6ic/f20
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60a75fa7851758e5b13abc23723b5627537e6cabd2ea1d1a8f9d3066ca54aa0e
Files
-
60a75fa7851758e5b13abc23723b5627537e6cabd2ea1d1a8f9d3066ca54aa0e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.nsp0 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 566KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE