Behavioral task
behavioral1
Sample
9a7bcc4e3b65a338429dd926ee4a6f05.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a7bcc4e3b65a338429dd926ee4a6f05.exe
Resource
win10v2004-20231222-en
General
-
Target
9a7bcc4e3b65a338429dd926ee4a6f05
-
Size
689KB
-
MD5
9a7bcc4e3b65a338429dd926ee4a6f05
-
SHA1
13a37b8699c815804d26bfa41cf75717e24e1e3e
-
SHA256
c22d6497c8ee47c3b56e098033f5544127f249bcce2c0fb38b5867fbd065844b
-
SHA512
81305c0526e0e9d891dc813f42ba71fecd77baa8f56955597ee67057610ee45eb97c9c090a083f9c3c46708aed88084665d3bb2a3f1c5f0b2a6b5385c26859f7
-
SSDEEP
12288:Nc2Hsbt0/uH70YrCJ/PjW3MPFtXGTWzsoOyBXeSEuOzwoS:Nc2HK1WhvzFmSVOz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a7bcc4e3b65a338429dd926ee4a6f05
Files
-
9a7bcc4e3b65a338429dd926ee4a6f05.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 686KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE