Behavioral task
behavioral1
Sample
796a830851cac62936b9e342be941ef6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
796a830851cac62936b9e342be941ef6.exe
Resource
win10v2004-20231215-en
General
-
Target
796a830851cac62936b9e342be941ef6
-
Size
1.3MB
-
MD5
796a830851cac62936b9e342be941ef6
-
SHA1
cb4a293b557ec516cb12e6a46645dc528d8c8309
-
SHA256
074e948fff2617df589b4173e906c344ef6b78e48fda919e1aa545b8523b6066
-
SHA512
0bc0c039c71756c7fe2082b5d9110d455319049527f1f308bf3111a5749474e5074935f9525a3e76c019d00d2cab5599f39109857789d378105b5bcf3300c70a
-
SSDEEP
24576:T+vbL5dRtEP3BburDoaRi9vjNRYmhooucVKfGlGreeHaaod7zgU9/9Us:2L5REDFjNRYmhtTVK1HafR9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 796a830851cac62936b9e342be941ef6
Files
-
796a830851cac62936b9e342be941ef6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE