Behavioral task
behavioral1
Sample
09d7cc1dc417f234270663e6429714bb52fcb584f513d3d8f39f83b011059dd5.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
09d7cc1dc417f234270663e6429714bb52fcb584f513d3d8f39f83b011059dd5.exe
Resource
win10v2004-20230703-en
General
-
Target
09d7cc1dc417f234270663e6429714bb52fcb584f513d3d8f39f83b011059dd5
-
Size
2.1MB
-
MD5
2f47946774166ce756e5d840963b8f67
-
SHA1
f2b2e65d09b6ecb6c9f155bd8ff714f244f41f17
-
SHA256
09d7cc1dc417f234270663e6429714bb52fcb584f513d3d8f39f83b011059dd5
-
SHA512
8a3817efab770625b8bb0dea94d8ecb05fb8bffb73bf17e815640d1cdafecb8a404d7407ab5c2cd7c935d395196ee48caf1ea5d7af468dfa56350ca9b25cf06c
-
SSDEEP
49152:RaUFBsfh27Vfh2n0r3Q8S3nF1q7MyOxZNbIGvXXSPyrF4nf:RaUyCVfM0cfvq7M3ZNbXXXSyG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d7cc1dc417f234270663e6429714bb52fcb584f513d3d8f39f83b011059dd5
Files
-
09d7cc1dc417f234270663e6429714bb52fcb584f513d3d8f39f83b011059dd5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE