Behavioral task
behavioral1
Sample
396ad8a2c4e35852c6eb9a9f6b6d100a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
396ad8a2c4e35852c6eb9a9f6b6d100a.exe
Resource
win10v2004-20231215-en
General
-
Target
396ad8a2c4e35852c6eb9a9f6b6d100a
-
Size
9KB
-
MD5
396ad8a2c4e35852c6eb9a9f6b6d100a
-
SHA1
d2c5f3bdfdd08bc0da46a4fe254067e487536a06
-
SHA256
ba87d68eca5a177b3ad4997cfe12632a199277db90a5f1c90214b769215e5734
-
SHA512
3200711ed983515ca63b11fca425247ed640ade72cbdc666e2d1c2721977a5978d60e31396706e13d161e2861585d01eb3929b86011318cef4fc6146f28c61ed
-
SSDEEP
192:NY74radsCCH1e627EZxyDhUzjbvK1Bg7IlFpVpTzc4gChUbt:NyCVi7EgUznK1WElFpVtc4gCabt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396ad8a2c4e35852c6eb9a9f6b6d100a
Files
-
396ad8a2c4e35852c6eb9a9f6b6d100a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE