Behavioral task
behavioral1
Sample
964a5d85cf4f828d55af1e46d6aae1c3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
964a5d85cf4f828d55af1e46d6aae1c3.exe
Resource
win10v2004-20231215-en
General
-
Target
964a5d85cf4f828d55af1e46d6aae1c3
-
Size
317KB
-
MD5
964a5d85cf4f828d55af1e46d6aae1c3
-
SHA1
029ea1d2fdf534647327815779deea5f1d30e1ac
-
SHA256
127b415fc330723c575de204eb1ca404613651ae55599ee5258be31350ef094c
-
SHA512
b244d506de55e3a4711784091cec43822ce725c5c4f8e4c27d4a612944b8c0cdc09dbe6e12ebc6663148812bf9d8b7e39f366cd42a3fba1a1e23d657822972a1
-
SSDEEP
6144:hGtsYRtuVfK8GQoF4X6fw9Fo6ReuTNkdJlHkDpzCbAf4TFvTJrvRmAr:hRVfKtQogu4FXReuTyPlHkDFpgJdrvIC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 964a5d85cf4f828d55af1e46d6aae1c3
Files
-
964a5d85cf4f828d55af1e46d6aae1c3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE