Behavioral task
behavioral1
Sample
9fa2d2187137314a5bcd4f79773291ea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9fa2d2187137314a5bcd4f79773291ea.exe
Resource
win10v2004-20231215-en
General
-
Target
9fa2d2187137314a5bcd4f79773291ea
-
Size
3.9MB
-
MD5
9fa2d2187137314a5bcd4f79773291ea
-
SHA1
37cabad3c7cf1c38fe4b4c0a621b6191ccb82be9
-
SHA256
5961d48791958a83faa1c0142e520ff341effd89e83da8211b99bdd54073e57b
-
SHA512
bf92fb9f9affa20e302c285ba7b60b665a45b985d1a6b85599111e95a92f97eeccbaa13101732ad3df0acda0571240f9810e792ae6ee5329cce9a4783e7f86d5
-
SSDEEP
98304:BozUtfW1M6vyD2i7D3xkOxYwpKoxRqz0k/PEvD2i7D3xkOxYwpK9ZTnKHQRD2i7q:BoWfUGh7FkNqKoxcz0kUh7FkNqK3WQRk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fa2d2187137314a5bcd4f79773291ea
Files
-
9fa2d2187137314a5bcd4f79773291ea.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE