Behavioral task
behavioral1
Sample
09d30cd137e5225082e28db24186c9e1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09d30cd137e5225082e28db24186c9e1.exe
Resource
win10v2004-20231215-en
General
-
Target
09d30cd137e5225082e28db24186c9e1.exe
-
Size
821KB
-
MD5
09d30cd137e5225082e28db24186c9e1
-
SHA1
78f6ebc0b3aa7e4978a61e3f5ebd7e5a2dda484b
-
SHA256
28a44f629d7285fe74a9ad666791be753332279724f24d6bb0b333f1ae6cde74
-
SHA512
f97d74ef2c4c52d58d3baa04b00602b542b2da6a083d958d74913339d0d585a0e68c5b3aa693f72640d7d16c800e1aeacde42cdf40bbf6fcd64f8e82307ce3fc
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7u5nJl3//nJl3/V:jt0VPFfsKAkrbPl7ub
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d30cd137e5225082e28db24186c9e1.exe
Files
-
09d30cd137e5225082e28db24186c9e1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE