Behavioral task
behavioral1
Sample
a9b20ca2a8a20e31a6807330876f4da9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a9b20ca2a8a20e31a6807330876f4da9.exe
Resource
win10v2004-20231215-en
General
-
Target
a9b20ca2a8a20e31a6807330876f4da9
-
Size
3.2MB
-
MD5
a9b20ca2a8a20e31a6807330876f4da9
-
SHA1
f93a13154227f61e0898179bfa2fe6125190f923
-
SHA256
fcf550c804a02818d0778ba02da8f340f2b7828e792594e605ba09eda6929fbe
-
SHA512
48936002b1c46589326a57d9e9c13a4b60c0f3a33c0b6cb0c2fe530e7065799e552e37623e1bf1af5048c448e9738da295e736c62319a297b9fc82be8e6a9e88
-
SSDEEP
98304:vhLgY6qqOgKT/RHwcakc7uRHBLLMecakced7XnSIcakc7uRHBLLMecakcO:vJg+V5TGdlqRHBLgedlgXSIdlqRHBLgx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9b20ca2a8a20e31a6807330876f4da9
Files
-
a9b20ca2a8a20e31a6807330876f4da9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE