Behavioral task
behavioral1
Sample
76d197d53fc3ba46a7b8e3edeb668234.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
76d197d53fc3ba46a7b8e3edeb668234.exe
Resource
win10v2004-20231222-en
General
-
Target
76d197d53fc3ba46a7b8e3edeb668234
-
Size
202KB
-
MD5
76d197d53fc3ba46a7b8e3edeb668234
-
SHA1
bbbb228e13c1cf14c273ac1e622974ad0755e1fe
-
SHA256
7335b884ae3fba50793e7553e6963f3357974f3fada637164f56cfc0195b93e8
-
SHA512
62729b8d35eead8d3781d112c05eb71fb2832364c944b2f0d0ada54a95db211d3d517c25be4c9c2713d2180abd5fddb26c5736bf701199f17002394288093c43
-
SSDEEP
6144:z2+FNW0WPdUgp8VnvSMVqJPupqOi9/J273z:z2xx1R2vSMQO3Q/Yz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76d197d53fc3ba46a7b8e3edeb668234
Files
-
76d197d53fc3ba46a7b8e3edeb668234.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE