Behavioral task
behavioral1
Sample
f9030cc99eade3bc7fb63b55140404f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f9030cc99eade3bc7fb63b55140404f4.exe
Resource
win10v2004-20231222-en
General
-
Target
f9030cc99eade3bc7fb63b55140404f4
-
Size
724KB
-
MD5
f9030cc99eade3bc7fb63b55140404f4
-
SHA1
e40ca4bc00ad8bb4d6ca8a4eaf11a4af75a976ae
-
SHA256
18311478b5a4a9c398fadd29df8ee9afe125a6f2194e84dd80bc0a8f632e885d
-
SHA512
d39409f44a67b6ef4bb0c740125355451fe9871909e31443269b37c81a528e3667ff2cc196c918dca86dcc416d67ad4645ef3147d470950e2cd5a8748b590c93
-
SSDEEP
12288:kL2g5vL6OIbbUxxzis8ck/uG2hg9dof5vJSUTb3cpMpCg/2w:Lg5ObcxxvjkGG2hcoBBSUTb6c9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9030cc99eade3bc7fb63b55140404f4
Files
-
f9030cc99eade3bc7fb63b55140404f4.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 600KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE