Behavioral task
behavioral1
Sample
090b4cb61115313835322b8a838a1236.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
090b4cb61115313835322b8a838a1236.exe
Resource
win10v2004-20231222-en
General
-
Target
090b4cb61115313835322b8a838a1236
-
Size
133KB
-
MD5
090b4cb61115313835322b8a838a1236
-
SHA1
8a306f0ac9bf83ca751590ddab42d416b2015f4d
-
SHA256
759dcb2e8c109d721bb70d74ba68570dbc881ab85f4116ef48544d0f9c70aca2
-
SHA512
10bb5c989fbf2c5f594335bf050f341d473cc36ef4d9f00d937f14bda827b45e2bfe2a5042f5fc17eeff0803c6383f93ea6f17451e24b6a109f8a114e855ae80
-
SSDEEP
3072:2MyaauA1TCPKzHWVv7ho3yzB/hIdVPBkAWAAedglAnEmN5uQ:2b56Tu2B/G3p2A7genPNwQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 090b4cb61115313835322b8a838a1236
Files
-
090b4cb61115313835322b8a838a1236.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE