Behavioral task
behavioral1
Sample
9fe138bdb6a173c3e0a398659db384999302693ef6e2f8e04a9226367d56252a.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
9fe138bdb6a173c3e0a398659db384999302693ef6e2f8e04a9226367d56252a.exe
Resource
win10v2004-20230621-en
General
-
Target
9fe138bdb6a173c3e0a398659db384999302693ef6e2f8e04a9226367d56252a
-
Size
2.0MB
-
MD5
b07c712675708343faa939cc74803ff6
-
SHA1
6ea0a036bd43aaf82c6886b0179e8483c872adde
-
SHA256
9fe138bdb6a173c3e0a398659db384999302693ef6e2f8e04a9226367d56252a
-
SHA512
c7b393f22369745ec0dcd2dc3144aedc8ade57490dbab72afbf86d8755efca4c7aac743a642d86f076613cb6dad177f47b5fdc81bfe9b1d2cf605f80f9353d59
-
SSDEEP
24576:OQJqPMF89tCynA9Ne2mtTWneBIfH4MJ32BOqhdGF8MaS1A2628MvS11:OD8Jq3tre5J3Hq2F8MD1E28Mq11
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fe138bdb6a173c3e0a398659db384999302693ef6e2f8e04a9226367d56252a
Files
-
9fe138bdb6a173c3e0a398659db384999302693ef6e2f8e04a9226367d56252a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 1.2MB - Virtual size: 65.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 516KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ