Behavioral task
behavioral1
Sample
96456d547aa2e959ac4db8c7a63b6a6f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96456d547aa2e959ac4db8c7a63b6a6f.exe
Resource
win10v2004-20231215-en
General
-
Target
96456d547aa2e959ac4db8c7a63b6a6f
-
Size
133KB
-
MD5
96456d547aa2e959ac4db8c7a63b6a6f
-
SHA1
b9a131b32c411fa21d98fd5e793dd5e598ff471e
-
SHA256
f6a2c93c2ca94e3c49fa078760f68e29955421f7a58108b1f1f9907a3daec9fd
-
SHA512
219fa3471111845de6f35d678ec393b20972faa760809c4394ebea96ea594e6b0a3908b94ba7fb670c665c388ef1fce3a7ea79bdec080c4f5cefa5e4f19995ee
-
SSDEEP
3072:867ffxxtm/YfsdNLABg9Pn1rnLA9FLkx4tzIBzNKGd1hQ:867ngvdn9Pn1rnLcLk6t8WSbQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96456d547aa2e959ac4db8c7a63b6a6f
Files
-
96456d547aa2e959ac4db8c7a63b6a6f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE