Behavioral task
behavioral1
Sample
9ab704a3567195e5185a3ff61938cadf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9ab704a3567195e5185a3ff61938cadf.exe
Resource
win10v2004-20231215-en
General
-
Target
9ab704a3567195e5185a3ff61938cadf
-
Size
610KB
-
MD5
9ab704a3567195e5185a3ff61938cadf
-
SHA1
9371c3d5b0e765ce358955adc9955277afcf1ba9
-
SHA256
b326f4a5d4f1d482d76a8eeae80f33ba972a6e8a293107dc10d73f517476af4b
-
SHA512
5027797f2b19fcef4d4ad068ce01e387c5d191d499aab85ad7c0670b86a0a1f00c0504f9525f55111ba96972b7cb9f3851fedeb258f6e8c5f4d8fb3b4c7fd9f2
-
SSDEEP
12288:lFngyTtGd5n/8n3FfDHuh6bUDD+4QACxKrI20ih//Xqc4SPIBxnF+Y0ZR:Tn1TQsrv4v+4nE2I2p/q32I/FF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ab704a3567195e5185a3ff61938cadf
Files
-
9ab704a3567195e5185a3ff61938cadf.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 609KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE