Behavioral task
behavioral1
Sample
techs trakker.exe
Resource
win10v2004-20240802-en
General
-
Target
techs trakker.exe
-
Size
7.2MB
-
MD5
e058497061e55a594f41ddf1731777e1
-
SHA1
2505f2fa17819ca3c90276c33e2778df4e89cc21
-
SHA256
aae79a120108698686a7068b54ea2e61304feb414ab55f7c1044cc367b9c40ea
-
SHA512
c764069c2b5db0e1e0f244c66be5b77f64fad7a94ec453ee0aa9fc464116a2a4b59db7d5621af1cab89b01128499a294516b7c2a0f4b974a4ec35a8c07058173
-
SSDEEP
98304:51dFqr5ELdSHy23RGrfp9cmXno4dMmX/N9qO/JbGcCO1Z2+1Agrwnr4S78kzaEY:HdyELdSH13Y3bXoPmvz3BsrpWEY
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource techs trakker.exe
Files
-
techs trakker.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE