Behavioral task
behavioral1
Sample
61dc002fc48b19df01be5d42fda75a7078f3053d9b50dbd0506b2ed95909396f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
61dc002fc48b19df01be5d42fda75a7078f3053d9b50dbd0506b2ed95909396f.exe
Resource
win10v2004-20241007-en
General
-
Target
61dc002fc48b19df01be5d42fda75a7078f3053d9b50dbd0506b2ed95909396f
-
Size
60KB
-
MD5
f9014a36ff654f3ec96356c701f4fe06
-
SHA1
56707194750c4da2ac3fdbbc2be8cab152aa03d7
-
SHA256
61dc002fc48b19df01be5d42fda75a7078f3053d9b50dbd0506b2ed95909396f
-
SHA512
963005bc925f5f34c3617c9ebec71beb9ec9d7e8723bbe8787cd103ab6b10c9079ef7bbed83aa465273592707a594d26c7be9064fbd6930d2d834de082019d66
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJnvnS:V7Zf/FAxTWoJJ7TPUqNI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61dc002fc48b19df01be5d42fda75a7078f3053d9b50dbd0506b2ed95909396f
Files
-
61dc002fc48b19df01be5d42fda75a7078f3053d9b50dbd0506b2ed95909396f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE