Behavioral task
behavioral1
Sample
d65f6ee08e9cbbd3a803a01f73788e255a270cb760e4bbfdc2e9a6c782166060.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d65f6ee08e9cbbd3a803a01f73788e255a270cb760e4bbfdc2e9a6c782166060.exe
Resource
win10v2004-20240508-en
General
-
Target
d65f6ee08e9cbbd3a803a01f73788e255a270cb760e4bbfdc2e9a6c782166060
-
Size
92KB
-
MD5
c2ea7c4b5d9df4e19aa13ef32532b65e
-
SHA1
b639b90742fb170bca78554028f1f35a2f4c8226
-
SHA256
d65f6ee08e9cbbd3a803a01f73788e255a270cb760e4bbfdc2e9a6c782166060
-
SHA512
c458bdbdc2660db8149939c3c411df4763e4efac5320d263ce70baeb30b79bb2d8545517b1c6f76a3525ef5b4d5a190347f51a81297bdb0298171633fba1e3d5
-
SSDEEP
768:DGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KZ04FyW+EQlR:izqsQ5PIt4+/yfeB6rAnYjR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d65f6ee08e9cbbd3a803a01f73788e255a270cb760e4bbfdc2e9a6c782166060
Files
-
d65f6ee08e9cbbd3a803a01f73788e255a270cb760e4bbfdc2e9a6c782166060.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE