Behavioral task
behavioral1
Sample
960bef742a071b77bf39a3b6e9c288ab.exe
Resource
win7-20231215-en
General
-
Target
960bef742a071b77bf39a3b6e9c288ab
-
Size
3.2MB
-
MD5
960bef742a071b77bf39a3b6e9c288ab
-
SHA1
f8fcf6565347c052d097c75ec471f71f720bb0cc
-
SHA256
4adb11114d0b818fed958fb06c68d0776b86c1d8d47a779e69f08e8f4f4ad1d0
-
SHA512
99d9c4cc448e0e2424f55bc6947f6d7ecf235c5f91a5f7c8b631fd74bcfae9fd40c0e786200064af3ea45f35269e0dd6dc256eb08f708ada38528e87462368cd
-
SSDEEP
98304:H3CaqB1Mwj6jWCwDfKBsm1xZvQCHVTHsv1TQqikmJM2oeqZ:HeTMkqwDfKBppQSmv1h+5qZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 960bef742a071b77bf39a3b6e9c288ab
Files
-
960bef742a071b77bf39a3b6e9c288ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE