Behavioral task
behavioral1
Sample
0706a906e20881d6b498feca46c79549.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0706a906e20881d6b498feca46c79549.exe
Resource
win10v2004-20231215-en
General
-
Target
0706a906e20881d6b498feca46c79549
-
Size
5KB
-
MD5
0706a906e20881d6b498feca46c79549
-
SHA1
1c473f330ece8c154e0b92657819632368692d66
-
SHA256
14aef4f671253da271d169649bf2879a51c7c6f3841b2d0c93cb80a70d8e10a9
-
SHA512
72e22bb415adc07f5ec40777312231faab5644ae782e5ba5203ab4b6ba0c8a0cef5110494a5a6d401d029510b0c3c9fd49992183ee0e05a7bdf869cb3babb46a
-
SSDEEP
96:5N0/WzgUs4pvPN4wH90cBMlXXjchDeP//f91r+bpQd:w/WjR90+mgwHd1SbWd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0706a906e20881d6b498feca46c79549
Files
-
0706a906e20881d6b498feca46c79549.exe windows:1 windows x86 arch:x86
410a1cf5e716ffcc50f66067129699ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AdjustTokenGroups
kernel32
CreateThread
user32
BlockInput
gdi32
Chord
ws2_32
htonl
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE