Behavioral task
behavioral1
Sample
f9278e36e50af79b92de664d56b8b92e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f9278e36e50af79b92de664d56b8b92e.exe
Resource
win10v2004-20231215-en
General
-
Target
f9278e36e50af79b92de664d56b8b92e
-
Size
133KB
-
MD5
f9278e36e50af79b92de664d56b8b92e
-
SHA1
f05e05081fa4a915ec0601fd60b5051eae2c78dd
-
SHA256
ee89062807c88c465d8b48753d03b9508dc5bb49585137aa3ccdecf87fbf36d0
-
SHA512
8cd98d118f8ccd53fac56d2dbd9de2ef7a3e1e76bf84d19b39361a7af3c54791fc5315724095f00063904e0dfd6c6e5fb29c47e76cc1867e5de701dc88208258
-
SSDEEP
3072:8UxtrIlDq0QdLqtBSqQf5KpSrMYOMJQFo7W8I3HfMQ:pxKlDrQdLx75P4YPul9HfMQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9278e36e50af79b92de664d56b8b92e
Files
-
f9278e36e50af79b92de664d56b8b92e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE