Behavioral task
behavioral1
Sample
064422c628e4dd03b80d3c1604da60875569ef9d7c97c3e7167a7f1de9d39c7a.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
064422c628e4dd03b80d3c1604da60875569ef9d7c97c3e7167a7f1de9d39c7a.exe
Resource
win10v2004-20240709-en
General
-
Target
064422c628e4dd03b80d3c1604da60875569ef9d7c97c3e7167a7f1de9d39c7a
-
Size
655KB
-
MD5
61156144a95eb675105065b5de80861f
-
SHA1
33c94c514f38e05d123788c1a7e8e8e0efa4081d
-
SHA256
064422c628e4dd03b80d3c1604da60875569ef9d7c97c3e7167a7f1de9d39c7a
-
SHA512
598f5d5622c6a1373a075f01e66a0188e75c06156640e9f77433b5fb4fd3f5a907efb23821a6c3a47901c0219408fff437f0f4805ecb7ce75a2f00f4717067dd
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFQ:1HNJDMor12mquPZjqm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 064422c628e4dd03b80d3c1604da60875569ef9d7c97c3e7167a7f1de9d39c7a
Files
-
064422c628e4dd03b80d3c1604da60875569ef9d7c97c3e7167a7f1de9d39c7a.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE