Behavioral task
behavioral1
Sample
9916d282d5650053ffb7f89b0be92220.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9916d282d5650053ffb7f89b0be92220.exe
Resource
win10v2004-20231215-en
General
-
Target
9916d282d5650053ffb7f89b0be92220
-
Size
402KB
-
MD5
9916d282d5650053ffb7f89b0be92220
-
SHA1
d2d1fed559bf1415de7f01a83c1a52ea53227992
-
SHA256
d171675ef8091e62ed3cab584388e52baf7dd787ec6e48575b4df0bcdb48ba5d
-
SHA512
24774898b85c9b41e46251eb8ace25c7eb6b9302905d8c4aad5c5685d7312714fda3199a4e92960e56b0662ddd8237ebbb53a8d1c7774501b7d4acf616513140
-
SSDEEP
12288:T8FSuTa9cavCwHuQunfR0yFlWHVAkDABoSZ:gIuTa9ceCwHLwyyFAVA2A1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9916d282d5650053ffb7f89b0be92220
Files
-
9916d282d5650053ffb7f89b0be92220.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE