Behavioral task
behavioral1
Sample
967140f4d30e19dd1e311e852121166a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
967140f4d30e19dd1e311e852121166a.exe
Resource
win10v2004-20231215-en
General
-
Target
967140f4d30e19dd1e311e852121166a
-
Size
3.9MB
-
MD5
967140f4d30e19dd1e311e852121166a
-
SHA1
e2e45c064ff2d3df436fa9dee3b19cf2d88832c1
-
SHA256
502ff6016288da9223a846226e6a4c5702043bc6705c66713ed6b1b0f205abb1
-
SHA512
ecd2baecb44b6833a72205809b687466a787c16c9749b05925e9defe3f72a01f408721b8b8975974858d3cf7be29cc325f7ab56e7db82f76635f48ecca6692bf
-
SSDEEP
98304:N95+2ngdyacakcibiqhAgMloPwtcakcibiqh6Lt0TRz4rdNAcakcibiqhAgMloPp:N9zNadlir0ptdlirELCTRz4p6dlir0pI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 967140f4d30e19dd1e311e852121166a
Files
-
967140f4d30e19dd1e311e852121166a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE