Behavioral task
behavioral1
Sample
76c9d45aa37a10c2162e4e395c6e0ddb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76c9d45aa37a10c2162e4e395c6e0ddb.exe
Resource
win10v2004-20231222-en
General
-
Target
76c9d45aa37a10c2162e4e395c6e0ddb
-
Size
6.4MB
-
MD5
76c9d45aa37a10c2162e4e395c6e0ddb
-
SHA1
932ec50b030bf4fbf4946be13e632817253e99ff
-
SHA256
d3f032f21efc535f231fcc1aa6dcfa3c62d14625d78068528e0393351d9ef4a6
-
SHA512
3ace7f46eb7d7719c54ab29d2dc5722277343fed653b7664d13b5300d2d8be4deaac7f4f26e06a3c9c5cda071f4f4fa72b274bcbe4d0257481931213841f67fb
-
SSDEEP
196608:UsSyNdlAfcdlhzU9GNdlAfcdl13IHdlAfcdlhzU9GNdlAfcdlO:UmzSGAzSGO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76c9d45aa37a10c2162e4e395c6e0ddb
Files
-
76c9d45aa37a10c2162e4e395c6e0ddb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE