Behavioral task
behavioral1
Sample
966074e172c2b88dc7e7979ab5c56424.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
966074e172c2b88dc7e7979ab5c56424.exe
Resource
win10v2004-20231215-en
General
-
Target
966074e172c2b88dc7e7979ab5c56424
-
Size
2.6MB
-
MD5
966074e172c2b88dc7e7979ab5c56424
-
SHA1
2189be33c06a89955c48cecf5559d5d2f156f8be
-
SHA256
328505762c90adcfc700c2354dec990f1758fe339cbf08d83060851c3d0fc5ad
-
SHA512
54fcabbbd5a15d98cad784d01ffafcc50580460eb641b0a4a74e1caf41d1ca9341cc8b5cc903c506f1e9098a91afb087a2aeb8afcbb1ef556976dc6f710f23cb
-
SSDEEP
49152:9DwmuEZh1Mk5sEBf2+8+GBraFjFzwrdRlnay3:KmlA0zLGoQRv3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 966074e172c2b88dc7e7979ab5c56424
Files
-
966074e172c2b88dc7e7979ab5c56424.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE