Behavioral task
behavioral1
Sample
f9cf8ab4d2018a426bcc6ceb7d964a841fd20aa7762f8b2a77592a48a91bdee5.exe
Resource
win7-20231023-en
General
-
Target
f9cf8ab4d2018a426bcc6ceb7d964a841fd20aa7762f8b2a77592a48a91bdee5
-
Size
11.3MB
-
MD5
3977c6dde5c2dc499ba45c61e3ad7bc8
-
SHA1
e6c2fc23ebaecf362f40e23fd189ef4a25f4c3a0
-
SHA256
f9cf8ab4d2018a426bcc6ceb7d964a841fd20aa7762f8b2a77592a48a91bdee5
-
SHA512
7b6a2b2ca41ec61ccb4dfa0a508bc70cf21799fbea40a150c70de28361b22b5bf7a1e77821e7d5c3959ae74b25e5a8c4a145ea8d021150be636ff5d5b7feb29b
-
SSDEEP
196608:AqFIknNgbor6z0rsrMneGooQGPvBOrxsSRRqJJktdTck8sqFGE3d/+X:1mCCoezESMneGooQGPs1Pqv4TcHsqgEG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9cf8ab4d2018a426bcc6ceb7d964a841fd20aa7762f8b2a77592a48a91bdee5
Files
-
f9cf8ab4d2018a426bcc6ceb7d964a841fd20aa7762f8b2a77592a48a91bdee5.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 34.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11.1MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE