Behavioral task
behavioral1
Sample
978ef460ee8d30608984b20539553b13.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
978ef460ee8d30608984b20539553b13.exe
Resource
win10v2004-20231222-en
General
-
Target
978ef460ee8d30608984b20539553b13
-
Size
93KB
-
MD5
978ef460ee8d30608984b20539553b13
-
SHA1
f9514554c4a8afeefaab1009d02e509b79c011f9
-
SHA256
92c424fabf91e5bd2b1ef1e70f7f78a35ce7e7c1b824c7c61a5e9888c9720c28
-
SHA512
1cb7d4b51a964a5efc8403015ef712dc743acb9a426f25e0f21bddfc0635c4488af8bd54807e0469e0810ac85bd940631ac874b09ee25591242124340295632a
-
SSDEEP
1536:SKcR4mjD9r823F2y9N+0gV3COjg868lsUPn5Jex1CRi9StfXOikf3i+:SKcWmjRrz3R9gB3DsUf5AxERi9sfXwfv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 978ef460ee8d30608984b20539553b13
Files
-
978ef460ee8d30608984b20539553b13.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE