Behavioral task
behavioral1
Sample
992fbf34e63f4c6909d23dca144efce0.exe
Resource
win7-20231215-en
General
-
Target
992fbf34e63f4c6909d23dca144efce0
-
Size
56KB
-
MD5
992fbf34e63f4c6909d23dca144efce0
-
SHA1
65a2e6699a6b50826c18303ab7e30273720e0f5e
-
SHA256
86969080a333d66045637143ed0f56f983f5410c757f3b306c3bcaa848b97403
-
SHA512
43c1482ef48350866a821fd475ff3c5126c5db7e8790c1172df3bf7923a01367f0ebc30a3233fb3ebf0798063e8b5cb72fdb43d57a6aead2ec5bd8a841cae1fb
-
SSDEEP
768:mHPQZE/Cwoun4BJWZClafV1ENBEOWQVwpb2/QKucgvO65Ym2PjcZIo0/iSH+Wm/F:WDH54pg1EzEO5rgvrxcA29leWRqtf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 992fbf34e63f4c6909d23dca144efce0
Files
-
992fbf34e63f4c6909d23dca144efce0.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
UPX0 Size: 52KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE