Behavioral task
behavioral1
Sample
d9fb50f69e0a379cbdd5ee3afdd1a7b0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d9fb50f69e0a379cbdd5ee3afdd1a7b0.exe
Resource
win10v2004-20231222-en
General
-
Target
d9fb50f69e0a379cbdd5ee3afdd1a7b0
-
Size
133KB
-
MD5
d9fb50f69e0a379cbdd5ee3afdd1a7b0
-
SHA1
fece1e7aabcc5b13e7312ffd5c1fa439af437adf
-
SHA256
21c3c9eb9d3008e83e6ad8b84578f6949110b44dc1589be40b7f04ff77e15fa2
-
SHA512
dc5bea6be8f3b2fad5805cfa823a78ef6c8ca268bcb54740f7ef939bfb2cfc15b3630899b08380d07ab1ca2b4546aa6cd8d437c4245a5aadcd878c1a332d1b48
-
SSDEEP
3072:Tat0Z/16JtbMaonalQRSBQTAvyNAFK8RyIh0wXcSuhdp7YQ:TjB16/b5oaC4Bpvyqg2yIJsdlYQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9fb50f69e0a379cbdd5ee3afdd1a7b0
Files
-
d9fb50f69e0a379cbdd5ee3afdd1a7b0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE