Behavioral task
behavioral1
Sample
09a2d1601d1f739927d2b642dd8a2e67.exe
Resource
win7-20231215-en
General
-
Target
09a2d1601d1f739927d2b642dd8a2e67
-
Size
784KB
-
MD5
09a2d1601d1f739927d2b642dd8a2e67
-
SHA1
81fb00a75e22b91674df36469c1c3fedee3098bb
-
SHA256
b4463619a9679da8d9803515e7adf0a13fe503ea467224c5102671ea3943928d
-
SHA512
76fecf2561bbdb669b9cdb79a8a253c316e153647e92f226d931d5cfe1cc83cd3c78b1e0e1024acc047802868c624060cd0c4fa20caa0524b7ac4a0c489ce5d5
-
SSDEEP
24576:/g3rpfwhEgS2TXr3V0XzUOmq9sIXgk3NsGUbA4GPaq05/:/gbpIs+XTVeoOmmnXKFzWxO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a2d1601d1f739927d2b642dd8a2e67
Files
-
09a2d1601d1f739927d2b642dd8a2e67.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE