Behavioral task
behavioral1
Sample
9f3395209d87a6c62d51674a802fda9f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9f3395209d87a6c62d51674a802fda9f.exe
Resource
win10v2004-20231215-en
General
-
Target
9f3395209d87a6c62d51674a802fda9f
-
Size
5.3MB
-
MD5
9f3395209d87a6c62d51674a802fda9f
-
SHA1
fd1f31311e98f98a52f583d8bc3f895ac49dccc8
-
SHA256
dafee5e3a2ac57142a4a6cb8c91c59988d6a03e6f1b0bc8aea787d201e797b10
-
SHA512
5bc38393f75242e43babb9f310b2b77a4e70078891a153724a3ffc4063d71142315f5e23fbbb10164ddf2ff2038dc562a8fc0c45c6529742cdaa546046b828a5
-
SSDEEP
98304:v/V6UlxitaQiqdxUQzqGeMCU2jZK7nUVlFj619fKl5byeFjZK7nUVlFj6:v9ZDoa5pQzbWNjY7nclx619fUjY7ncl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f3395209d87a6c62d51674a802fda9f
Files
-
9f3395209d87a6c62d51674a802fda9f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE