Behavioral task
behavioral1
Sample
76382e171f255f078d5bd35313d3ef3e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76382e171f255f078d5bd35313d3ef3e.exe
Resource
win10v2004-20231215-en
General
-
Target
76382e171f255f078d5bd35313d3ef3e
-
Size
2.6MB
-
MD5
76382e171f255f078d5bd35313d3ef3e
-
SHA1
5e2da1e9f734896072466dbb523f00271f9a5dbd
-
SHA256
d0ffc1dd476cde4088c6bfa572608029f5ed26caa755561fa4dfb21a6cbf8400
-
SHA512
563b64a38a51e4d6bb770841862fd58ee20b1389d9aac3c694e7c2cf45c6cdab5abad168371711dd65c105bdfeb4f8d9583f3b2d2770e8ff9c7eef79520a90a7
-
SSDEEP
49152:91YIhGMfLZ5NEpJCVUirUuLAjavT9DoJcDB/2z8ay3:91dIQbv6Jc1EU3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76382e171f255f078d5bd35313d3ef3e
Files
-
76382e171f255f078d5bd35313d3ef3e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE