Behavioral task
behavioral1
Sample
9689398bdd8a3a01851c35d51dd981df.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9689398bdd8a3a01851c35d51dd981df.exe
Resource
win10v2004-20231215-en
General
-
Target
9689398bdd8a3a01851c35d51dd981df
-
Size
3.9MB
-
MD5
9689398bdd8a3a01851c35d51dd981df
-
SHA1
d5d31cfcd85859d268d4c9fac1d904773ef1ae4f
-
SHA256
06ac896df6fa9829b81bee0cbb79f64a32c0ba53c765adaedb501a72397169ca
-
SHA512
0b1364cbd20c928af4c68f2fb635604cb2d89f8b530316316bdf06a7d574df6dfb324574213a53f3b9f1f91db7b013dd43e9d4039fc06f4baf6870e794f1729a
-
SSDEEP
98304:beUZi8LvqqA9zyULG+os3pCsA9zyULG+IC8AtJtuGV+xShzA9zyULG+os3pCsA9V:6OiZzLq/mpCpzLqk8Ab4SWzLq/mpCpz+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9689398bdd8a3a01851c35d51dd981df
Files
-
9689398bdd8a3a01851c35d51dd981df.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE