Behavioral task
behavioral1
Sample
9acbeaf1e80f4cc6e930359d54eb7abe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9acbeaf1e80f4cc6e930359d54eb7abe.exe
Resource
win10v2004-20231215-en
General
-
Target
9acbeaf1e80f4cc6e930359d54eb7abe
-
Size
37KB
-
MD5
9acbeaf1e80f4cc6e930359d54eb7abe
-
SHA1
22508716cd5eb4fe7892ec0a225bddfb10688da5
-
SHA256
1131538c6a4f6be82a9848447c99315c8f4fb8b2e01647cc89e3a7fe499d8edc
-
SHA512
0d7fd8dcd3352667af55499d475322689860344ba1a4a1ae7bb6795e46f94eb1c6ccebe37b4ddcfe6e7376f7d0db1fb0d4fa766c027562bbf526df9930a8c534
-
SSDEEP
384:qjrU1YpoViKec6NprndI7varCXGDJcZl9ABj9gz2OqIWdWg/Xs1tRPJ:4pEeYgC+SaKBWUP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9acbeaf1e80f4cc6e930359d54eb7abe
Files
-
9acbeaf1e80f4cc6e930359d54eb7abe.exe windows:4 windows
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE