Behavioral task
behavioral1
Sample
9020b5be38464e4b1e71461e94c93d09.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9020b5be38464e4b1e71461e94c93d09.exe
Resource
win10v2004-20231215-en
General
-
Target
9020b5be38464e4b1e71461e94c93d09
-
Size
351KB
-
MD5
9020b5be38464e4b1e71461e94c93d09
-
SHA1
f7930c638bcc3be45ecee87b8a68c64c4c62e9e6
-
SHA256
906cf1b365b87df7e201993fdd19680c14af641b4da0ee23576469c578a5522c
-
SHA512
e3b97a26a46369262f85bb3c9ddd41412ebd02e75ad54c95705fdbaeca86b032352a2d8e7f1f1ecb12d7fdfd1fbd0d9c3ff86ef83bc207ac0e772df255d992df
-
SSDEEP
6144:6GSPCzWONw6EDZhiukNy3NNz0YyGEWdr2uvPgvmWsn2xQMo7Hvr3QBH75EzH:67KTWeCNNzCqdPvPO0LM8vMxo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9020b5be38464e4b1e71461e94c93d09
Files
-
9020b5be38464e4b1e71461e94c93d09.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE