Behavioral task
behavioral1
Sample
0966709de4dab469617b099070818240N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0966709de4dab469617b099070818240N.exe
Resource
win10v2004-20240802-en
General
-
Target
0966709de4dab469617b099070818240N
-
Size
579KB
-
MD5
0966709de4dab469617b099070818240
-
SHA1
2593020bad6d219e3ed53fb1bf514e3a9c03bfad
-
SHA256
3bdc94ba02e35446ac30d73b7a538cc245c5460cf3853bd4b465ee6f95a40514
-
SHA512
05a22245bb0c7ab869bc5b0a8dc7cffd7968a75c09a942864fb33716e386a17e7aff8b5b0daaf2da8f465ae3512fbb083c65ed4d3cc48142de209d77b8e9156f
-
SSDEEP
6144:phbZ5hMTNFf8LAurlEzAX7orwfSZ4sXUzQIQfVKezcdwg0c1:jtXMzqrllX7EwfEIQtG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0966709de4dab469617b099070818240N
Files
-
0966709de4dab469617b099070818240N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE