Behavioral task
behavioral1
Sample
b61bef3c41b63d25e334abdf096123872d89d01dea06228b83d8652fc72253edN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b61bef3c41b63d25e334abdf096123872d89d01dea06228b83d8652fc72253edN.exe
Resource
win10v2004-20240802-en
General
-
Target
b61bef3c41b63d25e334abdf096123872d89d01dea06228b83d8652fc72253edN
-
Size
655KB
-
MD5
e2d288d2f3b3e6c06dd59a23133beea0
-
SHA1
714a2a17a4bbd8f9fdabda1c290371fd881cfd4a
-
SHA256
b61bef3c41b63d25e334abdf096123872d89d01dea06228b83d8652fc72253ed
-
SHA512
8f2824802fb60e6cb2d8d02d2dadf623b7727458d5293e71e7193f9da7d0b81097f5c51ddb1c40dc498b2f79d410fe5b98d995b9695b9a05a8d84a5ae6c7d6c1
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFP:1HNJDMor12mquPZjqJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b61bef3c41b63d25e334abdf096123872d89d01dea06228b83d8652fc72253edN
Files
-
b61bef3c41b63d25e334abdf096123872d89d01dea06228b83d8652fc72253edN.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE