Behavioral task
behavioral1
Sample
9906ea95c8156dcf8b767cf84c470380.exe
Resource
win7-20231215-en
General
-
Target
9906ea95c8156dcf8b767cf84c470380
-
Size
398KB
-
MD5
9906ea95c8156dcf8b767cf84c470380
-
SHA1
2481c1ac9d99300d926f2618505942322fb1333d
-
SHA256
af89544f93cd0ec91a08166170ab7fe587a51dcf9b46f026e835310dabe98305
-
SHA512
463807eccec08dc05559f9054cbd9d729d15713333b90a25bfd234a67352ef6313a3a4572dea40f1775909326384fcc38813215f700ac8700604b22a0a323d84
-
SSDEEP
6144:rFESH6HMkCyK4DvkN1C23+pEYTgtJ9wT+zzIU2OB5zk2J+bbS/GaXnmuYoSJ:/6HMkCyNczC23gEYGJ9wBUX2Qn3WVoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9906ea95c8156dcf8b767cf84c470380
Files
-
9906ea95c8156dcf8b767cf84c470380.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 382KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE