Behavioral task
behavioral1
Sample
60ce9fd0a5038e023163acce0043a15fce412971dc7d52ef68cb67bd752250ed.exe
Resource
win7-20241010-en
General
-
Target
60ce9fd0a5038e023163acce0043a15fce412971dc7d52ef68cb67bd752250ed.exe
-
Size
196KB
-
MD5
ab78e23f7febfa69080e3bc635338b88
-
SHA1
8f028aad0def4efef3819f85a0407b090f9fa22f
-
SHA256
60ce9fd0a5038e023163acce0043a15fce412971dc7d52ef68cb67bd752250ed
-
SHA512
dcc467de8e12c5207dc5990ca965d32290244a7542269de24c7b45754bd9549b27fb1efdebcaf1a1dc92f2f3b5a187963e3a631c7a118fef3511db1fba295cee
-
SSDEEP
6144:mHEBryCbtJQj1GY6BDEhulnq//bOXb3u3frbfB9j94rnoSW:mSQjkdBDEIlnqHbub+3frbp9R4zoSW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60ce9fd0a5038e023163acce0043a15fce412971dc7d52ef68cb67bd752250ed.exe
Files
-
60ce9fd0a5038e023163acce0043a15fce412971dc7d52ef68cb67bd752250ed.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE