Behavioral task
behavioral1
Sample
61f22d208237ad10fdd1205b4afc76cc54fd5a8990815fce663d63e06684146a.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61f22d208237ad10fdd1205b4afc76cc54fd5a8990815fce663d63e06684146a.exe
Resource
win10v2004-20240802-en
General
-
Target
61f22d208237ad10fdd1205b4afc76cc54fd5a8990815fce663d63e06684146a
-
Size
30KB
-
MD5
5bc8140ea50284cfd5a67871e32aaa9a
-
SHA1
909827bbb6b41260e75a433da04f1eb02048e199
-
SHA256
61f22d208237ad10fdd1205b4afc76cc54fd5a8990815fce663d63e06684146a
-
SHA512
257e4f7e72e42d55b8206d61c8d8174243059a9eb5298fae4ce92c4d3f65f338818ef451dd1ef25ef66c75e71162ced8c1f84135af2226cf30986bc233b99ad8
-
SSDEEP
192:vAE9pqHEqEpWeVZKMt2/rtrup7txHAvydedcrmVU/+Kdl/02Uhp02W02:r9gHEqEpgMshvydfrmVk+KdVmbw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61f22d208237ad10fdd1205b4afc76cc54fd5a8990815fce663d63e06684146a
Files
-
61f22d208237ad10fdd1205b4afc76cc54fd5a8990815fce663d63e06684146a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE