Behavioral task
behavioral1
Sample
33c6d31fdc42cca03122a58a6bf3f6e74c38edf33c0097d040788fb989f96500.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33c6d31fdc42cca03122a58a6bf3f6e74c38edf33c0097d040788fb989f96500.exe
Resource
win10v2004-20240802-en
General
-
Target
33c6d31fdc42cca03122a58a6bf3f6e74c38edf33c0097d040788fb989f96500
-
Size
655KB
-
MD5
49e16c2efc3bbb28b1a857626e4e5e9e
-
SHA1
7da2b9f7dd7b1acef13c53f615c1a6d900c14aa5
-
SHA256
33c6d31fdc42cca03122a58a6bf3f6e74c38edf33c0097d040788fb989f96500
-
SHA512
05105ef04ce4f8a9319307dd7d86fd0ef9031c0cae549195cccdd1364807a43e6cd5da41622e17ad63926fe7b8c4a827efaad7bf9bf52fa92632023e6234babf
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFb:1HNJDMor12mquPZjqR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33c6d31fdc42cca03122a58a6bf3f6e74c38edf33c0097d040788fb989f96500
Files
-
33c6d31fdc42cca03122a58a6bf3f6e74c38edf33c0097d040788fb989f96500.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE