Behavioral task
behavioral1
Sample
60e620cbc9b12a71a8a901e788c87010N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
60e620cbc9b12a71a8a901e788c87010N.exe
Resource
win10v2004-20240802-en
General
-
Target
60e620cbc9b12a71a8a901e788c87010N
-
Size
55KB
-
MD5
60e620cbc9b12a71a8a901e788c87010
-
SHA1
c4c4f1ada61283d3a74dcdb80cf628b13d2a3086
-
SHA256
f14bf034d15e2fff2aaf12508eb4d706e443aee9c5f5d0a364c1c34d281d6b2f
-
SHA512
2d409891b36fe503d4dcff567cbca760ea76d3efb9dae8c7b1c3990ba6861453eef573dac6b246b692ce2399af811d70c9052bfa79bfd969009b09b4d90fe4e1
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJZKmF:V7Zf/FAxTWoJJ7TPUN3G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60e620cbc9b12a71a8a901e788c87010N
Files
-
60e620cbc9b12a71a8a901e788c87010N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE