Behavioral task
behavioral1
Sample
9709ef4e0fcd48244b3b4444c3aa8248.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9709ef4e0fcd48244b3b4444c3aa8248.exe
Resource
win10v2004-20231215-en
General
-
Target
9709ef4e0fcd48244b3b4444c3aa8248
-
Size
198KB
-
MD5
9709ef4e0fcd48244b3b4444c3aa8248
-
SHA1
7ad2205a7667ea10b8b68f7609af7f8614706376
-
SHA256
e8e6c5fd912d7e64364bd37810da548f9c35de51451475411625635ed22c0579
-
SHA512
22e278b25cf38370f3bef01531ed94bec347484122e2c98a09be0abbe4b0e35210938d833456b3c80d9dda3b8bcd3ac4cd13fff43f443f4cf43397b1a10bc06d
-
SSDEEP
3072:2XxAMZ7VA+r7riB7eGhHzIfZwtL322iSYe3c7XInAj3l9GT/H6te6CSuIVl:2Xxd7VHbUnTO+G2iSYeM7vDzGn67
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9709ef4e0fcd48244b3b4444c3aa8248
Files
-
9709ef4e0fcd48244b3b4444c3aa8248.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE