Behavioral task
behavioral1
Sample
9972cfbb4030abf79afaf6dc98bfe5ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9972cfbb4030abf79afaf6dc98bfe5ba.exe
Resource
win10v2004-20231215-en
General
-
Target
9972cfbb4030abf79afaf6dc98bfe5ba
-
Size
459KB
-
MD5
9972cfbb4030abf79afaf6dc98bfe5ba
-
SHA1
d128459539979c573681c5013aa875b3c4ba8bd8
-
SHA256
219f4a31d48b037df7155b67d6ac1ce5c4fa4a58bdce74dd30527c6e60cc98f2
-
SHA512
413c12522f3d22bbf7ada0c62cca4832ee692be62361da73c70b2dd13082957c0b48d009ce1e7131557c35361a9fa2e6ead11483e5b3bf9532c05e6266db3f66
-
SSDEEP
6144:12M9Dr4gqr+RNtXh+Tu0vVhfVjEn0INW8B50MFvJj1mHGwvrJFPc0GGdEwDsD:J6r+j1f0tPjNIfB5rB8fHuwU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9972cfbb4030abf79afaf6dc98bfe5ba
Files
-
9972cfbb4030abf79afaf6dc98bfe5ba.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE