Behavioral task
behavioral1
Sample
706fcfec12b1979f1514f33e06e8b106.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
706fcfec12b1979f1514f33e06e8b106.exe
Resource
win10v2004-20231222-en
General
-
Target
706fcfec12b1979f1514f33e06e8b106
-
Size
19KB
-
MD5
706fcfec12b1979f1514f33e06e8b106
-
SHA1
4c883c26a0085c3253954e740ba9a06b3649c970
-
SHA256
e3f1f7a6a2e805b41beecbfa9b80031d84304ff693d3922f6b09a8b008f5554e
-
SHA512
9f12c39380c25840b28e2667b39fb93377fc6b134a317939055b3bc551ec666063b99f1874c753d92a608b0b441c34d959a95d2419852e1d90fe413f09c62160
-
SSDEEP
384:vdb2FCGFYVttWAUAXldT/t1+9bZid+1F9dLpnPy7QLJE2co:VbIRyVttWCpqby4Q7uTco
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 706fcfec12b1979f1514f33e06e8b106
Files
-
706fcfec12b1979f1514f33e06e8b106.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
QQFs Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QQFs Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE