Behavioral task
behavioral1
Sample
9c1a8cd31ef2b4c81f65437cdceadb55.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c1a8cd31ef2b4c81f65437cdceadb55.exe
Resource
win10v2004-20231215-en
General
-
Target
9c1a8cd31ef2b4c81f65437cdceadb55
-
Size
3.9MB
-
MD5
9c1a8cd31ef2b4c81f65437cdceadb55
-
SHA1
7231e30d825be7324951b8b15095aba41c0819b4
-
SHA256
329bef5213d4de197005e9aa96cdc3d40b64a340fbfaef55f765f4ec1624350a
-
SHA512
03267d16a550b353b8f1eb884046ef2b8d1fa81262b64d683cee2c1c60dac2e97d2fa2d2dd083275be6e89147e3b7f6bfb9433f461e5a3373ce3bd58184135e5
-
SSDEEP
98304:Btby+qyLPGD2i7D3xkOxYwpKl9m6xhYueoZkXmckD2i7D3xkOxYwpKj4087kN0Ud:fby+qyih7FkNqKlQoGucDkh7FkNqK8A7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c1a8cd31ef2b4c81f65437cdceadb55
Files
-
9c1a8cd31ef2b4c81f65437cdceadb55.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE