Behavioral task
behavioral1
Sample
961928044fedba91c17e5a3ce368cd30.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
961928044fedba91c17e5a3ce368cd30.exe
Resource
win10v2004-20231222-en
General
-
Target
961928044fedba91c17e5a3ce368cd30
-
Size
2.7MB
-
MD5
961928044fedba91c17e5a3ce368cd30
-
SHA1
a54e7bc369169dd908d54152d64f8242ebd1d30c
-
SHA256
63dd632bb35f69e001053387135cd4f29efa4f76b8d1339b83ea99aa1b043ceb
-
SHA512
0108c5bc39a46d993a2ef68004b633268535e919c97c229aa47d29c8bcab318158240d5f9eb281e69dfe17f03ce2108b9994631a7d3c75c9b4b95ec30b158c51
-
SSDEEP
49152:W/7jUMWW/2M534u382P1ER9UvMqpeXCBlDOLR9j:4AMF34gVPSHDqkyBpOLHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961928044fedba91c17e5a3ce368cd30
Files
-
961928044fedba91c17e5a3ce368cd30.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE