Behavioral task
behavioral1
Sample
966bb1fb73f98a60ae5f219edcc17bdb.exe
Resource
win7-20231215-en
General
-
Target
966bb1fb73f98a60ae5f219edcc17bdb
-
Size
2.3MB
-
MD5
966bb1fb73f98a60ae5f219edcc17bdb
-
SHA1
cde87c452b698b272b31787ba493ea1b4eb1d265
-
SHA256
0fe5b979de519aaf39e4b4204e43c20a0479e18c6006921d7614f7a7a7aec044
-
SHA512
bd3e63d1fe500eee3fba4533638e6aecc5f42d156a5dc14f2c848007184d18a2020db6ff6adfbb005943c94c01b7d0706452c4878e0557a41bc3f7f4b932088a
-
SSDEEP
49152:vvavILk7vRXwEb889uwAmCQmj7Jzl7/gGZubP4W1fiWG:vvyILkDdbTFTCjplbturit
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 966bb1fb73f98a60ae5f219edcc17bdb
Files
-
966bb1fb73f98a60ae5f219edcc17bdb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE