Behavioral task
behavioral1
Sample
796e3d3ccd618f7bd5c5d4e9ecac25ef.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
796e3d3ccd618f7bd5c5d4e9ecac25ef.exe
Resource
win10v2004-20231215-en
General
-
Target
796e3d3ccd618f7bd5c5d4e9ecac25ef
-
Size
59KB
-
MD5
796e3d3ccd618f7bd5c5d4e9ecac25ef
-
SHA1
0ed9743faa921054dfc3c417671e2f5c119d8e9c
-
SHA256
c6fdb63a86177c40fa1c6f8957c908eed35df0570c8f41c58c40c9a1209b0839
-
SHA512
3b4524e63da26bc0e01aff8ff146c87e04d54fb3c9803b77c495ad61e88e4653b235502a9ef17dd16e880ec33da4114c6a317ca8f0a63572591a5bd4f64cdd83
-
SSDEEP
1536:2EQg7jIGGldOJ867fPVRUaz3s74rCTAc6q09MGb4Qhj92adV:2E1n/mYJFLvUaDM4rCTf6gpQl9Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 796e3d3ccd618f7bd5c5d4e9ecac25ef
Files
-
796e3d3ccd618f7bd5c5d4e9ecac25ef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE