Behavioral task
behavioral1
Sample
624d51a63adc5a1e0c5b430675605e4af6e166a303745aa916d025a60223e915.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
624d51a63adc5a1e0c5b430675605e4af6e166a303745aa916d025a60223e915.exe
Resource
win10v2004-20240709-en
General
-
Target
624d51a63adc5a1e0c5b430675605e4af6e166a303745aa916d025a60223e915
-
Size
9.4MB
-
MD5
0c94992add391f265d7c86cff680b935
-
SHA1
674b42f2e3dee5d8ff0b5ae86ad09f483caa430b
-
SHA256
624d51a63adc5a1e0c5b430675605e4af6e166a303745aa916d025a60223e915
-
SHA512
964ab345c702cac93eab71696def5182c985f332da734d8f7985dbbee41fd6362818f511cc514a3df912577734af8c5b38ee79352d547bbc6d3c5bfd0c12b5eb
-
SSDEEP
196608:ruhFGAKtMedw3k++iLcIUjC0hF6OvvlMXAi/071+vP6udZdtpcztf:ruhIu0+znUZh/vxhUPBvpczp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 624d51a63adc5a1e0c5b430675605e4af6e166a303745aa916d025a60223e915
Files
-
624d51a63adc5a1e0c5b430675605e4af6e166a303745aa916d025a60223e915.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 19.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE