Behavioral task
behavioral1
Sample
923b9d04388b97d26763230931453c3b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
923b9d04388b97d26763230931453c3b.exe
Resource
win10v2004-20231215-en
General
-
Target
923b9d04388b97d26763230931453c3b
-
Size
2.7MB
-
MD5
923b9d04388b97d26763230931453c3b
-
SHA1
5d8aebbaae26210ca6cfa78b4f1b992984bf6237
-
SHA256
450cbb0b4951dff914231054b90eb4f0577831bb3654762baa2624e2b8709710
-
SHA512
a20c42a1eda82daf7aef83703bdf7fade4d708357d942735501ab68ebc9c74529bb5a7841cb9ab90d0999dddaa4f295e15e2f899264bca89f23a170073bf6cef
-
SSDEEP
49152:vvOFFTRtU+6Eksyol/BmfUI4OHCFl36aKR9SEAqjxe7HzSC/iWuvALqFyKkL3iCh:2tkEkQl/B6Fib36jHSEAKe7z/9EAGF3A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 923b9d04388b97d26763230931453c3b
Files
-
923b9d04388b97d26763230931453c3b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE