Behavioral task
behavioral1
Sample
b96ca6f708b5a669ed322f392804f1b6b5570e96ddc6d0aa6762d25aee33935a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
b96ca6f708b5a669ed322f392804f1b6b5570e96ddc6d0aa6762d25aee33935a.exe
Resource
win10v2004-20231023-en
General
-
Target
b96ca6f708b5a669ed322f392804f1b6b5570e96ddc6d0aa6762d25aee33935a
-
Size
4.4MB
-
MD5
09ce1d82ead72747af5cbd8e596a81d9
-
SHA1
af3c3830534a2bdf06fbfd8822d50de6b3ee5616
-
SHA256
b96ca6f708b5a669ed322f392804f1b6b5570e96ddc6d0aa6762d25aee33935a
-
SHA512
d1e7b888f37ccbdaa92a95d124144ecff8a44244530c1cce5d0e83494105bae54f041230440d279825782d16cf5911fa1390b4925701ae2119ca87f1ac15425e
-
SSDEEP
49152:S0DXyJ2v0pc7jydbS0z5oY64LmwmAJvf42vqbCHLT2TW:9DY2v0OjydbSNsmwmAJvf42vQCHLAW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b96ca6f708b5a669ed322f392804f1b6b5570e96ddc6d0aa6762d25aee33935a
Files
-
b96ca6f708b5a669ed322f392804f1b6b5570e96ddc6d0aa6762d25aee33935a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE