Behavioral task
behavioral1
Sample
61a8431ee5fca3286b267dd5680ba27bf9c1e12bf250b4325960cc974c94f19a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
61a8431ee5fca3286b267dd5680ba27bf9c1e12bf250b4325960cc974c94f19a.exe
Resource
win10v2004-20240802-en
General
-
Target
61a8431ee5fca3286b267dd5680ba27bf9c1e12bf250b4325960cc974c94f19a
-
Size
102KB
-
MD5
7ba7291dc19fa244202c4bffe4994501
-
SHA1
e42b10da16da987f8d76aaebeb99c063404ebf3e
-
SHA256
61a8431ee5fca3286b267dd5680ba27bf9c1e12bf250b4325960cc974c94f19a
-
SHA512
706ad52dfd8c853d2f5765bf1be3d8f3029e61c4b4ab4a134a62b8da3635ebdb119f5d56763f6eeb2d598f045e614f1b740c29def0557862f8ea91efc5123d26
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9nPn7Blpf/FAK65euBT3V:V7Zf/FAxTWoJJ7TZ7Zf/FAxTWoJJ7TF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61a8431ee5fca3286b267dd5680ba27bf9c1e12bf250b4325960cc974c94f19a
Files
-
61a8431ee5fca3286b267dd5680ba27bf9c1e12bf250b4325960cc974c94f19a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE