Behavioral task
behavioral1
Sample
76bbbf51d6337883041d855683387aae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76bbbf51d6337883041d855683387aae.exe
Resource
win10v2004-20231215-en
General
-
Target
76bbbf51d6337883041d855683387aae
-
Size
397KB
-
MD5
76bbbf51d6337883041d855683387aae
-
SHA1
65d1af561c4146744e3cd4db2e59ca7c1b93a811
-
SHA256
8fe5e54157f9e50f5c042ead6df4bfb9d31cffb36c1ebc7a56d91ebdd53aae89
-
SHA512
17d61b6bb576c0761a02936e4d55c3c244f723a9899ebe52d8a0bd1f50e439a5fc842bda026896f5cf392d11b9ee66783e1e870f005c204cd1f90b5a59ddea6b
-
SSDEEP
12288:Zp/La6yY3fS565lJbhC+AvXC1PWe5f+a4uAZyjoS:Zp/hyKS5Ol2+2iuyvAU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76bbbf51d6337883041d855683387aae
Files
-
76bbbf51d6337883041d855683387aae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 391KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE