Behavioral task
behavioral1
Sample
f961936bf94bcac121fe812e23888a4e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f961936bf94bcac121fe812e23888a4e.exe
Resource
win10v2004-20231215-en
General
-
Target
f961936bf94bcac121fe812e23888a4e
-
Size
9.3MB
-
MD5
f961936bf94bcac121fe812e23888a4e
-
SHA1
b1a5a5171131b2100cbde569bb5978ecaafbe9c9
-
SHA256
4ce2f17a7c3021bcf35ce77aa25039f92fda1f550ebb1db74c9e5650ae57526f
-
SHA512
dacd52b7a0c726e1510b03dc06abff28653dbbab658666aac5f79ec83c5121869e65ca2d9a8753e17e1b32b6d67d2c1dca4172d8947062ebe6e00b6c77187ee7
-
SSDEEP
49152:6F5msSHrhnvqZdsngFdITnUkcNVuV9zwuHE1w8wAZeodlyyFFdpnRHGE0f7QLZza:WcnoqnE1w8wAZeoPyyFNsR0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f961936bf94bcac121fe812e23888a4e
Files
-
f961936bf94bcac121fe812e23888a4e.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 7.6MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE