Behavioral task
behavioral1
Sample
993902fe4f3c1c6f9dee7f078f593062.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
993902fe4f3c1c6f9dee7f078f593062.exe
Resource
win10v2004-20231215-en
General
-
Target
993902fe4f3c1c6f9dee7f078f593062
-
Size
857KB
-
MD5
993902fe4f3c1c6f9dee7f078f593062
-
SHA1
3fe760dec1bf19009ea912c7a6ab0cb67e7f60da
-
SHA256
3d54b008f32f1801a11481908e3e382ba3e0eee6c693906c95960432480fd2fa
-
SHA512
75e444e8d5c4a5ecd49ee8d4cf90c88c5ee6d65a432fdf20e6ae30925a8bfe1530fd8d348d5765bb94ec33c5ad2e5961e44bae0fb302eea6f2f94f5dfd7f4d5e
-
SSDEEP
12288:uvKSwuojBkUuXQxrv3S1lh260CS5QnR9oy9K6mxXyjyQcWUwroMjdFqXqXM2B2UE:uvKhEUuXg3S1/0OPos3msj9cWwXqPPV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 993902fe4f3c1c6f9dee7f078f593062
Files
-
993902fe4f3c1c6f9dee7f078f593062.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 839KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE