Behavioral task
behavioral1
Sample
196ccfff9ce4dac910662acd80328547.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
196ccfff9ce4dac910662acd80328547.exe
Resource
win10v2004-20231215-en
General
-
Target
196ccfff9ce4dac910662acd80328547
-
Size
169KB
-
MD5
196ccfff9ce4dac910662acd80328547
-
SHA1
a5a2e6be680774920a32a20aa3d04010419c6d0b
-
SHA256
368a592507969df97bf8b2a628bf0dbb2d40c379a4739bf46b7661bcc41eda8e
-
SHA512
48e2105332d285b3d259367ea9b0a2c8cbfb34028ad481c1546219ecf709abf2b6ed7fc29cbeab79a987943490ed9332f6ea873835b090518d8de555c70e964a
-
SSDEEP
3072:AvbiA/Bh5+2oOKlc2gzyZdB2ycmxtgyNWx9zuh8Zk9NeZlahr+aWe1C42UCG5O:mn/BT+2clcKDB2BmxtgyEHyaG9gZchrL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196ccfff9ce4dac910662acd80328547
Files
-
196ccfff9ce4dac910662acd80328547.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE