Behavioral task
behavioral1
Sample
76075f12c548802dc2c379eb4f04a8a0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76075f12c548802dc2c379eb4f04a8a0.exe
Resource
win10v2004-20231215-en
General
-
Target
76075f12c548802dc2c379eb4f04a8a0
-
Size
278KB
-
MD5
76075f12c548802dc2c379eb4f04a8a0
-
SHA1
404458822ff66368bffe289699d9a577114d8d32
-
SHA256
e82ac0198beb30520ec2f49ddc0609270ec85f36acaf2d2a9af4fca3ab765f44
-
SHA512
3bc1a0019e87bf398dd9ccd36fe13d0a2d9e96c83df53a3ec46c455e89deb04dfea3bca66747b66cdb974a48f9bde6f29b5a23d225ecfea0167da5c769745602
-
SSDEEP
3072:EFod0BXgz1S2+S1RyTTtrqGFoaqq2LL3kH78:EqPpcSenFe3kY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76075f12c548802dc2c379eb4f04a8a0
Files
-
76075f12c548802dc2c379eb4f04a8a0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE