Behavioral task
behavioral1
Sample
209c7295942a760dbee2d4b5703d7f36.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
209c7295942a760dbee2d4b5703d7f36.exe
Resource
win10v2004-20231215-en
General
-
Target
209c7295942a760dbee2d4b5703d7f36
-
Size
3.7MB
-
MD5
209c7295942a760dbee2d4b5703d7f36
-
SHA1
1e85338f915413d45b09ae32560c05445fa055b8
-
SHA256
0fc3dcc3dd9f62e9f773fd3ea3a623def404564c03a4405c2beb1c95e88f4cdc
-
SHA512
db5a09962c42f0457cac52bcdcc5f5f3e0cac45bef45d2caf26b3ddfb654eb1dcdf1ced528ce9bd30a756e9d2adab5c3bc2b14bb2e71cfae9baa2ae2590af4f7
-
SSDEEP
98304:7PvqFJhvutAOMAoczYSBCDZMTmG/tetp3KCmAW3zgAgQUZypTUEMHHPaOJtHpYlP:7PvQ+ANAo0YSUMR/aEvzvWZyphcXJKZX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 209c7295942a760dbee2d4b5703d7f36
Files
-
209c7295942a760dbee2d4b5703d7f36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE