Behavioral task
behavioral1
Sample
396bf0513231f7f47627a4ded76bdc174ffd54da1f144e1081bd6d001c360dc3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
396bf0513231f7f47627a4ded76bdc174ffd54da1f144e1081bd6d001c360dc3.exe
Resource
win10v2004-20230703-en
General
-
Target
396bf0513231f7f47627a4ded76bdc174ffd54da1f144e1081bd6d001c360dc3
-
Size
361KB
-
MD5
dae240974c079f73113e42442525df83
-
SHA1
62b9b1fddb1a5a9c5966eb230ed07c39a1e00bb7
-
SHA256
396bf0513231f7f47627a4ded76bdc174ffd54da1f144e1081bd6d001c360dc3
-
SHA512
5687108bf82e9d000d778f566079c4ae35ae3042b01ce188410c03361c20cfb498811dad9c4b0db8aac598e82c68569978686357bbd6d715fb5bb0161a509f1a
-
SSDEEP
6144:g+Shfmg9CHfoSRw6BLydLGM4++s++j++/++S++Wr:hs2foSRwAe9GG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396bf0513231f7f47627a4ded76bdc174ffd54da1f144e1081bd6d001c360dc3
Files
-
396bf0513231f7f47627a4ded76bdc174ffd54da1f144e1081bd6d001c360dc3.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE