Behavioral task
behavioral1
Sample
checker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
checker.exe
Resource
win10v2004-20240802-en
General
-
Target
checker.exe
-
Size
249KB
-
MD5
fb643189f8612784752ef6de48b32587
-
SHA1
765197e842ccc294be8ed936e3c77952437739d8
-
SHA256
f71b94eecc7c5e49569ad66d3d4273135c6f8cd106054f9c7fb79826bacbef81
-
SHA512
3d719f8b56ffb7a395031bf933ae781fcea05f389bd9e54a4718a4237f31dae852fa3f244568ce0cd338dc322e494cf9795433ab15613b32e08e7671248a40ad
-
SSDEEP
6144:dBGonUwWDS8Fy4kgs8Gvp6mv/gKMdSs/e2uDnlJAH:dBGo1+lkZ7woKEI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource checker.exe
Files
-
checker.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE