Behavioral task
behavioral1
Sample
968d4902535ff109a69d7c3578f883c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
968d4902535ff109a69d7c3578f883c8.exe
Resource
win10v2004-20231222-en
General
-
Target
968d4902535ff109a69d7c3578f883c8
-
Size
311KB
-
MD5
968d4902535ff109a69d7c3578f883c8
-
SHA1
a331f6b91784964fbcf7cf1fd1e0f349d6ae48a8
-
SHA256
e7033d756d61d0efa3d1a83250397c9903a973e73de6453459606cd207f29088
-
SHA512
aa3f54468e5ca2ef1e284126d9b6a73a36c88b481f52d9269b2f4d5bf5769078bf771d327e892ad697ed4feee2025ed116f9fab03f029ef8d2c00dc561e6256d
-
SSDEEP
6144:+ddXO3NScWpTF+m+Qv1x4NKpvOF+adUKXtJbbwLNYFM0hrRm3jc4hoFQ:QIdW1MQv1OF+0wYK0htmzhU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 968d4902535ff109a69d7c3578f883c8
Files
-
968d4902535ff109a69d7c3578f883c8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 644KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 298KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE