Behavioral task
behavioral1
Sample
68e8e7411c4143455445604aa56a617e11595404efd5e551746cd9f2823db511.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
68e8e7411c4143455445604aa56a617e11595404efd5e551746cd9f2823db511.exe
Resource
win10v2004-20240508-en
General
-
Target
68e8e7411c4143455445604aa56a617e11595404efd5e551746cd9f2823db511
-
Size
1.3MB
-
MD5
9a173996bd29d8644acf87781684687c
-
SHA1
3ea3d907c2d54a04c97ac77fe3c9918e299698be
-
SHA256
68e8e7411c4143455445604aa56a617e11595404efd5e551746cd9f2823db511
-
SHA512
22f380230a4f56777137f349cf9bb7d04f8aa7bb6856acfc825b69421b94bd681e58dc7332467643c196961f2c8d61e36f9a1db5893190967dd07457d25208a9
-
SSDEEP
24576:l5Ij5b9XJjN/S5pllWrWw6eDTsci8/bYuq2eFo7MNT2QK6aGr5ryG5:QVb9X1BOllQzowbm2dZQK6aMT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68e8e7411c4143455445604aa56a617e11595404efd5e551746cd9f2823db511
Files
-
68e8e7411c4143455445604aa56a617e11595404efd5e551746cd9f2823db511.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB