Behavioral task
behavioral1
Sample
79be94045cdcbd3ee55f43709baff88a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79be94045cdcbd3ee55f43709baff88a.exe
Resource
win10v2004-20231215-en
General
-
Target
79be94045cdcbd3ee55f43709baff88a
-
Size
3.9MB
-
MD5
79be94045cdcbd3ee55f43709baff88a
-
SHA1
5e6a9315fae7a4ed647ec1e10f26b380f6a282ab
-
SHA256
45e8c0d166a232854c5ac19ba6d6bb69f6987e3f5fda54a38cd18aa9fe49b3b1
-
SHA512
1985e2bce78583aaa2db8fb3403bd0b08f1fbdae466d4b64b87dca59dd37e591441328bac4f593132daed9f2b87084c590629f8b570e2f042dd5af31079c104d
-
SSDEEP
98304:YW6cdRORAIA9zyULG+gMvUyQq+UlzWfSwA9zyULG+vIX014A9zyULG+gMvUyQq+O:6qRjlzLqXMvbp+Mi0zLqad11zLqXMvby
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79be94045cdcbd3ee55f43709baff88a
Files
-
79be94045cdcbd3ee55f43709baff88a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE