Behavioral task
behavioral1
Sample
9a05544d8e053490fab4a4416cbba103.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a05544d8e053490fab4a4416cbba103.exe
Resource
win10v2004-20231215-en
General
-
Target
9a05544d8e053490fab4a4416cbba103
-
Size
22KB
-
MD5
9a05544d8e053490fab4a4416cbba103
-
SHA1
ec8e3513b9e58143aeb7f15bfe045df3d68d222b
-
SHA256
8f1111aeacfa32cf5d6cc4483f4a0119b5207675959794a59ac706ba50e26a70
-
SHA512
75a39ccfe3b3cbd7c377d22c5a3f43edb920441e63e3d9c5be0773b44b76d7b274e734771beb3475208856a0e2973d16eeaa2a4262073d6a6cf7d7c876eac766
-
SSDEEP
384:PvYJvVVZ8UC77e3fO3TGJ1WcMjDZW9hmuYcSM0GBhTiDAzP1R4CIaNJawcudoD7J:HYB58U1fODGJ1WcCFW6+XTdR4Inbcuyl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a05544d8e053490fab4a4416cbba103
Files
-
9a05544d8e053490fab4a4416cbba103.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE