Behavioral task
behavioral1
Sample
9ac0f0e8e855d07d221a4fcd5c5ca094.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9ac0f0e8e855d07d221a4fcd5c5ca094.exe
Resource
win10v2004-20231215-en
General
-
Target
9ac0f0e8e855d07d221a4fcd5c5ca094
-
Size
1.6MB
-
MD5
9ac0f0e8e855d07d221a4fcd5c5ca094
-
SHA1
2725cc9dd1e47006b81b99c6a43d30341060b6eb
-
SHA256
8d9abbb138c2e18e3f5585d5f8bdd84a0a6816207968602b8e1e90e4c7e1a216
-
SHA512
ba660c7cc8f552903ac414f920610c94ac2bf7120d729f96f99c7f78f5797bb8388005e94a748bee1c8c7e49898ecbf5a43b314db7342af2515b33c558757f53
-
SSDEEP
49152:2HMSBQqEHL4OzcakLz0MA9r6PK7CUXtP8CcakLz0O:2H7QqEHLrzcakcMA9r6PF+tUCcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ac0f0e8e855d07d221a4fcd5c5ca094
Files
-
9ac0f0e8e855d07d221a4fcd5c5ca094.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE