Behavioral task
behavioral1
Sample
9aded5ef91275d468b16b8fa502da18f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9aded5ef91275d468b16b8fa502da18f.exe
Resource
win10v2004-20231215-en
General
-
Target
9aded5ef91275d468b16b8fa502da18f
-
Size
393KB
-
MD5
9aded5ef91275d468b16b8fa502da18f
-
SHA1
f552f39419276400994ac7d60405ec8ae46111c5
-
SHA256
f04834da082f893f2d3419948740d9eda46a01b172db12abfa7987aed9f136f2
-
SHA512
0d88c5963e4a5b51132048f289bea9a9267f8a690798fdccb2ceac73f66d3c1b36fbd434d313bfd143b5e85e7b53a16fcc0a11f99885a8288d7010ea7faee59f
-
SSDEEP
6144:hGyGg8DPzHxq2iL/+WyE+gxhI6WcjNyyO4nofjDA9khteKNMuEj:h3xGHQ0MRWQPofjkEteQs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9aded5ef91275d468b16b8fa502da18f
Files
-
9aded5ef91275d468b16b8fa502da18f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE