Behavioral task
behavioral1
Sample
96d6b99f3749718f2a8c7a46889d1ef0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
96d6b99f3749718f2a8c7a46889d1ef0N.exe
Resource
win10v2004-20240802-en
General
-
Target
96d6b99f3749718f2a8c7a46889d1ef0N
-
Size
57KB
-
MD5
96d6b99f3749718f2a8c7a46889d1ef0
-
SHA1
c9f6df9819e73ed9f5e4584eca048d6ea1aa773e
-
SHA256
b2f74a25df22b2c5619dc39b708c0e56b0f63146a0c48189fb1d20bbd1b6d8c5
-
SHA512
f956606731d5fb8c271187ddd16da1dea63f6a9e5c54bd4092be6a4d37fa94f7c8dbd4ed77c33148b072c3482d5877c14a6b25b3e9985be902020dc66913aaa6
-
SSDEEP
1536:ZB77777J77c77c77c71S1XeilJIrU+DB77777J77c77c77c71aliuKC:ZB77777J77c77c77c71KblJIrdB7777h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96d6b99f3749718f2a8c7a46889d1ef0N
Files
-
96d6b99f3749718f2a8c7a46889d1ef0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE