Behavioral task
behavioral1
Sample
69b3e1aedb5770bfd4213ecc6c39d1c774bfb5cec17c3f54fc5f156c5a956834.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
69b3e1aedb5770bfd4213ecc6c39d1c774bfb5cec17c3f54fc5f156c5a956834.exe
Resource
win10v2004-20240802-en
General
-
Target
69b3e1aedb5770bfd4213ecc6c39d1c774bfb5cec17c3f54fc5f156c5a956834.exe
-
Size
381KB
-
MD5
dffa207eb4f45eb531a8d0c87a73052a
-
SHA1
8d091bcb2d180501003be3d6ba269720934a6176
-
SHA256
69b3e1aedb5770bfd4213ecc6c39d1c774bfb5cec17c3f54fc5f156c5a956834
-
SHA512
56adc216d47ae379c87687e3eba7788b336fc9e0ad254a4fb5080b2a242ce2f08235042ef812f6c8d0ef03265dae5ea67fec99f697950f31ddd5633fc2ba1bad
-
SSDEEP
6144:cbPFFYzWlOxvOwYb6ylH55vSDTxTfiNAt+Dc/5QrEq5L/0SMyr1cyC6GXXRaxrhb:0YaMtM7DSDTx7iNAtDBiR5oI1YXO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69b3e1aedb5770bfd4213ecc6c39d1c774bfb5cec17c3f54fc5f156c5a956834.exe
Files
-
69b3e1aedb5770bfd4213ecc6c39d1c774bfb5cec17c3f54fc5f156c5a956834.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 358KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE