Behavioral task
behavioral1
Sample
936c884f454d88a85b35c314a0c441b704cdad276596fb1334ec3fba8bd8a959.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
936c884f454d88a85b35c314a0c441b704cdad276596fb1334ec3fba8bd8a959.exe
Resource
win10v2004-20241007-en
General
-
Target
936c884f454d88a85b35c314a0c441b704cdad276596fb1334ec3fba8bd8a959
-
Size
100KB
-
MD5
8c84398a3bb04a8b2094ab7cdeac4b85
-
SHA1
09395b3993d9b1fb29bfbc985c179f34a3540c2a
-
SHA256
936c884f454d88a85b35c314a0c441b704cdad276596fb1334ec3fba8bd8a959
-
SHA512
37b831d9d4b663f19ec8d3393e9c6e80012158fb276cd5e86ce986f879ca56a1764fbfaa875926a2fd3ba6aaf9a65df5c2da5fbc26d7e1c897092dc4d186a6ae
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTBHfiPgNkiwQpGyDO7W:fny1tErpNL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 936c884f454d88a85b35c314a0c441b704cdad276596fb1334ec3fba8bd8a959
Files
-
936c884f454d88a85b35c314a0c441b704cdad276596fb1334ec3fba8bd8a959.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE