Behavioral task
behavioral1
Sample
966ca11196c9a6ed57249bf19f24024800674b8400d69c606db477aea514c609N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
966ca11196c9a6ed57249bf19f24024800674b8400d69c606db477aea514c609N.exe
Resource
win10v2004-20240802-en
General
-
Target
966ca11196c9a6ed57249bf19f24024800674b8400d69c606db477aea514c609N
-
Size
22KB
-
MD5
ffb796db93288fbc75b06990551d18b0
-
SHA1
c2a337c59eeb9fe5c74d8c8b36de4f85fa419770
-
SHA256
966ca11196c9a6ed57249bf19f24024800674b8400d69c606db477aea514c609
-
SHA512
663795707fa10837c177326a1f85d24c3abb2ac7e2014d8a41f94b8d305df225f2a390469995456b3e2505149177f6eeb4cb25349e86ba8c73f4ef0ac66201fa
-
SSDEEP
384:UFI+eG/f2QIxx+2s+4fHNzLtH3f0pI3iTTjhzRXeW88H4xT6wbEfX11w0E:UFI+r323xxuN5f4I0hlXeZ8YxT6wb81k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 966ca11196c9a6ed57249bf19f24024800674b8400d69c606db477aea514c609N
Files
-
966ca11196c9a6ed57249bf19f24024800674b8400d69c606db477aea514c609N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE