Behavioral task
behavioral1
Sample
9a668bb129ec126ae0f211bf2fb8fb1b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a668bb129ec126ae0f211bf2fb8fb1b.exe
Resource
win10v2004-20231215-en
General
-
Target
9a668bb129ec126ae0f211bf2fb8fb1b
-
Size
2.0MB
-
MD5
9a668bb129ec126ae0f211bf2fb8fb1b
-
SHA1
b9ea2a423dbdb8b7b92f2b96af94aadbe8394360
-
SHA256
b771caad897ce894d79c47cd9b7d93df70b536872460eb7a5bd62ce73ab72b85
-
SHA512
fc19c5ef7a56e9fbaf4450e653a7d74b71b4b4c5168ae01b6a1cb981b9ac4ba32536917a30d3ef9d5e4e2cafd44347a1f669204a00bd0ad8b6866d888670a8ce
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPb:SCqm2Jpr0nNM7Dus7Nx2kCqb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a668bb129ec126ae0f211bf2fb8fb1b
Files
-
9a668bb129ec126ae0f211bf2fb8fb1b.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE