Behavioral task
behavioral1
Sample
9a4e67902ca1fceeb0102c2afac9bec8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a4e67902ca1fceeb0102c2afac9bec8.exe
Resource
win10v2004-20231215-en
General
-
Target
9a4e67902ca1fceeb0102c2afac9bec8
-
Size
4KB
-
MD5
9a4e67902ca1fceeb0102c2afac9bec8
-
SHA1
817c036ddb3d583eb659560e6dc22c5f5dbea902
-
SHA256
37f410781c9f19a4f21b371ad96657ec35744e4333c9404a258e7bf3cd5aeac8
-
SHA512
df3fdcb6926fede8bc693930e6843167583f26170b1df3dd468e323f7483407a0f5c4e1796b6a4b6bbf57755f69d6d8042f1fe4486028a8e7d86985203c218c8
-
SSDEEP
24:eFGSbA259Bacpav7LrJD70axsaVmxBRQRSBD4gF4sbEkvizEVjWv0FOgRUvHvpdw:icsBsRD73xsaVcBUgyOizEnFOgRUPztK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a4e67902ca1fceeb0102c2afac9bec8
Files
-
9a4e67902ca1fceeb0102c2afac9bec8.exe windows:4 windows x86 arch:x86
a813dea59f019eb3117cbeb237c14f54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDlgItemTextA
EndDialog
DialogBoxParamA
kernel32
GetModuleHandleA
ExitProcess
Sections
UPX1 Size: 1024B - Virtual size: 630B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.net Size: 512B - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nope Size: 660B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE