Behavioral task
behavioral1
Sample
96817e690013da505e11991ebd4e81a2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
96817e690013da505e11991ebd4e81a2.exe
Resource
win10v2004-20240226-en
General
-
Target
96817e690013da505e11991ebd4e81a2
-
Size
336KB
-
MD5
96817e690013da505e11991ebd4e81a2
-
SHA1
1df08d6644786a4cad99c750353976529c0bbc33
-
SHA256
7a9df911885f50beee03d6d1a0d404ee5ec6caec3ca1f0fd5131a772453b3d24
-
SHA512
51dded3a7f056f3ed752e221fd22e91aa9276aed07b55450625c4833813c641dd2c5df4f7ff3432f198e41f98f374ecafb54856cf032d9d720eecb8dbe01e697
-
SSDEEP
3072:hINzztfivMVMYuFkV3qBnFqOLp4mvy2ACh3gj5z8UPCMgqKR+n:hIVz8YurEmvy2AChOzLCWKR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96817e690013da505e11991ebd4e81a2
Files
-
96817e690013da505e11991ebd4e81a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE