Behavioral task
behavioral1
Sample
60fa6497c6ea356dce8851273a7c2c691483e80e2146ce68996c3e64b8a66fcf.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60fa6497c6ea356dce8851273a7c2c691483e80e2146ce68996c3e64b8a66fcf.exe
Resource
win10v2004-20240709-en
General
-
Target
60fa6497c6ea356dce8851273a7c2c691483e80e2146ce68996c3e64b8a66fcf
-
Size
63KB
-
MD5
564a9989bfe8c64340d797b2a942b42e
-
SHA1
58c1418a3008ca21847dd9a4c1062d8a5253d713
-
SHA256
60fa6497c6ea356dce8851273a7c2c691483e80e2146ce68996c3e64b8a66fcf
-
SHA512
493cc8347d77cffda99e62c5fcc1d7a78237e5e2347ba9f85be73d9b4cfac427cb4a12b1a4fbbe0e192829e50b22cc498654da5b2c9fa000f99c259cfec41161
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcfAVBaM0ukU8TG5m8:V7Zf/FAxTWoJJ7TbBaM0uV8TNW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60fa6497c6ea356dce8851273a7c2c691483e80e2146ce68996c3e64b8a66fcf
Files
-
60fa6497c6ea356dce8851273a7c2c691483e80e2146ce68996c3e64b8a66fcf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE