Behavioral task
behavioral1
Sample
9a4c0a7cbafc01d2ed672edda59251f9.exe
Resource
win7-20231215-en
General
-
Target
9a4c0a7cbafc01d2ed672edda59251f9
-
Size
2.8MB
-
MD5
9a4c0a7cbafc01d2ed672edda59251f9
-
SHA1
d18cd8753abe1378c7ed89483865798a9e57d967
-
SHA256
5e4bdbb4c87545e8bc06fa78d64858f9abcf4dc34c582ccd7a6f6ffc819803fe
-
SHA512
b5fcc2e6ad1663d4ee030b0f4b60a90bf36ea226a354908ec16f0b2459115e6180687da373091477f7642449c0238edecb814a53a5d1af99bac478fb21b1084b
-
SSDEEP
49152:m8zCMDSglCGuHAz8YWrOsYD9BRvbKkdOlqFwLhH7d3WmPgryljZhyv:F2MDSCAHA9WrOsUrRfcdemPg8Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a4c0a7cbafc01d2ed672edda59251f9
Files
-
9a4c0a7cbafc01d2ed672edda59251f9.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE