Behavioral task
behavioral1
Sample
76b3b0151d5e6561101a4e5d1f9ad434.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76b3b0151d5e6561101a4e5d1f9ad434.exe
Resource
win10v2004-20231215-en
General
-
Target
76b3b0151d5e6561101a4e5d1f9ad434
-
Size
2.8MB
-
MD5
76b3b0151d5e6561101a4e5d1f9ad434
-
SHA1
94e4a01da14b1b6e71bb85deb7048f1fd30a1ad6
-
SHA256
9d1b851e510ebda0d76a3ee041582036757804e8a5e16d8bc845e1456363e2fd
-
SHA512
44534a0eec6fcc8ede96f8ceed514d9950bdda0153aab45aaf54b8b672e9b76ceb9982e3584fed6cdad1138d7405870cea97e6a854d7ec81a6257902088e3489
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91e:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0ny
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76b3b0151d5e6561101a4e5d1f9ad434
Files
-
76b3b0151d5e6561101a4e5d1f9ad434.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE