Behavioral task
behavioral1
Sample
96fdccf453f059fdafd23ac639850348.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96fdccf453f059fdafd23ac639850348.exe
Resource
win10v2004-20231222-en
General
-
Target
96fdccf453f059fdafd23ac639850348
-
Size
501KB
-
MD5
96fdccf453f059fdafd23ac639850348
-
SHA1
3436a9d7075d9b5628c1823a37b5fc56b9585902
-
SHA256
07f8896738799c56c47bf9625e600f66cc89e952c9b101091a080bcd7210f94e
-
SHA512
6c7cdbf14b6a1f3e860044849f4fe30c4df290ac2557fe5890cb21b417b51ee39ec865cc3ddb95bb549cc335fbd472125ccb005ddb6de69a0b9cba48c6ae8a53
-
SSDEEP
12288:Sz+b0Ta3/JQJZAg0PsLQMr4EXyd/DSzIQIv3583qwV8bXcnXO:X4avgZ8Edr47d/Dt3u3lAc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96fdccf453f059fdafd23ac639850348
Files
-
96fdccf453f059fdafd23ac639850348.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE