Behavioral task
behavioral1
Sample
e68c5c47721c535bce283de1b6ff4b596074c085cde32ceda497b94a23ba5408.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e68c5c47721c535bce283de1b6ff4b596074c085cde32ceda497b94a23ba5408.exe
Resource
win10v2004-20240802-en
General
-
Target
e68c5c47721c535bce283de1b6ff4b596074c085cde32ceda497b94a23ba5408
-
Size
655KB
-
MD5
393135d461d18db7b8ec6db07315e476
-
SHA1
c241482980e9797c74113606753a9e1c1f2d3f1a
-
SHA256
e68c5c47721c535bce283de1b6ff4b596074c085cde32ceda497b94a23ba5408
-
SHA512
10b21a82cefdca34601036f22f724c977cd2e3f8c0140bbbd6b8b3b0f25691852c73fbe78018c446c76a5b70c47eaceee8b9400fa3b77e25cb201f7d91813332
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pF/:1HNJDMor12mquPZjqV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e68c5c47721c535bce283de1b6ff4b596074c085cde32ceda497b94a23ba5408
Files
-
e68c5c47721c535bce283de1b6ff4b596074c085cde32ceda497b94a23ba5408.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE