Behavioral task
behavioral1
Sample
9967e3e3b0aa776bc5563240d245221e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9967e3e3b0aa776bc5563240d245221e.exe
Resource
win10v2004-20231215-en
General
-
Target
9967e3e3b0aa776bc5563240d245221e
-
Size
7.8MB
-
MD5
9967e3e3b0aa776bc5563240d245221e
-
SHA1
4221be6579af5f9a8d9d9fefb497e4f64cf7ae3f
-
SHA256
9a1cec01a0cda540ed95c76fd55dd44a63abef5edfb98f17d9ef7a40e404fce1
-
SHA512
943b58decc330b7c3328bc26c3189e003c900accdc4f452e93fe240c7f986c852a6acf7ae7c99bee311359188c21aceb53e265512828170070c35cd9f94299e4
-
SSDEEP
196608:fKhdlirybMgOnkdlir/3Jw5MdlirybMgOnkdlirJvmYVFYlrpdlirybMgOnkdliG:fK5bMrndLbMrnFzVebMrndLbMrn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9967e3e3b0aa776bc5563240d245221e
Files
-
9967e3e3b0aa776bc5563240d245221e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE