Behavioral task
behavioral1
Sample
9a0c331447f3c2267d71f264f08f97f7.exe
Resource
win7-20231129-en
General
-
Target
9a0c331447f3c2267d71f264f08f97f7
-
Size
388KB
-
MD5
9a0c331447f3c2267d71f264f08f97f7
-
SHA1
823a4d0ed2fed9b8e8cee0c19d04415b3937b80a
-
SHA256
bf7b3ca8a759a1534ad3c023875d79302de24fadc1867b1b3f15101cf30e6dbb
-
SHA512
afa8ea03b9835abc99fa163cd296393e715a5d58d901ca3f5a1af784d1e18d0a0f8a1c9ce9bf40476d152875cbbffdd68254765b6ac01a8b2b7c0dfdc64fe149
-
SSDEEP
6144:BhXacaKCI20ALLAWB3MpAYaTcYD4CTvvFEYHKdORojppkBT+0Ye0RHEXMGhfGl:B8W20ALDB3CAYrs4CTCQR0/cP8RHEtOl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a0c331447f3c2267d71f264f08f97f7
Files
-
9a0c331447f3c2267d71f264f08f97f7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE