Behavioral task
behavioral1
Sample
981fb6004117f6488141c6301129d509.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
981fb6004117f6488141c6301129d509.exe
Resource
win10v2004-20231222-en
General
-
Target
981fb6004117f6488141c6301129d509
-
Size
1.8MB
-
MD5
981fb6004117f6488141c6301129d509
-
SHA1
9bbdafacf515dd50e3b5e1bc14c69da10b68380b
-
SHA256
1179f0e4863ab14afbe60cbe52c9465c6297575f849350af4d07ec34030940ba
-
SHA512
73d2b2a489028b7dce6c1e58f4bc88dfd40e8c84057996fdfd0d2769fc12983d454dc6baeaa566847c7b4673a59a63eed21d639631123678975ac419def8a931
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHg:SCqm2Jpr0nNM7Dus7Nx2A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 981fb6004117f6488141c6301129d509
Files
-
981fb6004117f6488141c6301129d509.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE