Behavioral task
behavioral1
Sample
996be70ac52b2614d664f22fbed958cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
996be70ac52b2614d664f22fbed958cf.exe
Resource
win10v2004-20231222-en
General
-
Target
996be70ac52b2614d664f22fbed958cf
-
Size
453KB
-
MD5
996be70ac52b2614d664f22fbed958cf
-
SHA1
b6699fd38897900569ea556603a83abba8bc13aa
-
SHA256
791ac4f7adb48d2b3a481231972b9fc3d7a5a1011503b7fa1655af114fbf712b
-
SHA512
a39e3b60b1ec9710d0c22df528b7df922768709cf58ac6e3f801c6c712044cb6557326b2ad8650b0f21cea04d5303b8eb2883b8160de79e452ffc3b07405a2ce
-
SSDEEP
12288:ypegxqPEoY7ultbn/VAVxSzTYBn//2Jo5:yT2EoB6VgzTYBn/P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 996be70ac52b2614d664f22fbed958cf
Files
-
996be70ac52b2614d664f22fbed958cf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE