Behavioral task
behavioral1
Sample
fa68df0d0e2e354b53cfd4cc62578f9e29abb9e983be5f139ec584e657f8b232.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
fa68df0d0e2e354b53cfd4cc62578f9e29abb9e983be5f139ec584e657f8b232.exe
Resource
win10v2004-20240611-en
General
-
Target
fa68df0d0e2e354b53cfd4cc62578f9e29abb9e983be5f139ec584e657f8b232
-
Size
8.6MB
-
MD5
11caabcbefdbec895baa79abc8ab25dd
-
SHA1
92d7a8c919bbbdf4a46dac0b498e67f296df5fda
-
SHA256
fa68df0d0e2e354b53cfd4cc62578f9e29abb9e983be5f139ec584e657f8b232
-
SHA512
53705a89a7ef398bd64ef0e64a82ab59e54b33cfff786b7e9e46283682c1bce2c32c3aa0a6c252fe8b06fb6824cb399b82137ba334acd498ff7a1fa154c0752e
-
SSDEEP
196608:wVDogcNC8pl2MeKC9p97HOpKB+fF4pRLHpD6i5IR:yDcNCFM8v7HOZfF4jrpD6i5m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa68df0d0e2e354b53cfd4cc62578f9e29abb9e983be5f139ec584e657f8b232
Files
-
fa68df0d0e2e354b53cfd4cc62578f9e29abb9e983be5f139ec584e657f8b232.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 34.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.6MB - Virtual size: 8.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE