Behavioral task
behavioral1
Sample
12c968804199eec2bbe12b0a797ca5e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12c968804199eec2bbe12b0a797ca5e9.exe
Resource
win10v2004-20231222-en
General
-
Target
12c968804199eec2bbe12b0a797ca5e9
-
Size
1.3MB
-
MD5
12c968804199eec2bbe12b0a797ca5e9
-
SHA1
ff3f5ea76283ad3d6fe9a0177490d14bf4a5e100
-
SHA256
652b5ed2ec015981bd535fcc3fef653a6517df041fc0b30d00429a353eb41571
-
SHA512
b2416b4db65f33d7a5e7c0bf6e5d49d6f84238e0e002026d5c45b62c01451e3fcfe5a023d9b194477480ab32dc47a2079dc27c9a00c6862f6a2512941f465d7f
-
SSDEEP
24576:CkgmnyyFYQEAOW/Q8DJqjTqLjNzjo+LAIfh4sne7orsjpdH2UeNvG:CkByyFYEOKQrqLjNo/WWukoruZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12c968804199eec2bbe12b0a797ca5e9
Files
-
12c968804199eec2bbe12b0a797ca5e9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE