Behavioral task
behavioral1
Sample
972cb9ce425699962278524cf3e74e35.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
972cb9ce425699962278524cf3e74e35.exe
Resource
win10v2004-20231222-en
General
-
Target
972cb9ce425699962278524cf3e74e35
-
Size
29KB
-
MD5
972cb9ce425699962278524cf3e74e35
-
SHA1
388ef480c05193c0604681e56caea41defed3a44
-
SHA256
064f18818a23e30d17bb3fc33e98a5b1c2874322b6a7107fc8dcd7181178c3b0
-
SHA512
24290dd288c6b29df053c3df4cbc3b0d2a87acddc04b49001bcb71a710ff5942d3874061dbad6d8b2f6e9a40d20be9ac4b42f7f7b4c66fb00250a1170e179274
-
SSDEEP
768:YYB5OKl+qXXo/TmFyDzJ2eLOeFd8lRA3Kp2G8ELNcW:YYPOKlnXY/TmC2ePdEoHcaW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 972cb9ce425699962278524cf3e74e35
Files
-
972cb9ce425699962278524cf3e74e35.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE