Behavioral task
behavioral1
Sample
9b0656f9cf50dc714afde3336f6b4680.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b0656f9cf50dc714afde3336f6b4680.exe
Resource
win10v2004-20231215-en
General
-
Target
9b0656f9cf50dc714afde3336f6b4680
-
Size
718KB
-
MD5
9b0656f9cf50dc714afde3336f6b4680
-
SHA1
11b51d75d37d0a4d2e5fb975120920da6cbd23ac
-
SHA256
4ff4b13858b9bb5aadee18b7766517b09eaf5899cdf61995148e24a80e35c97e
-
SHA512
67ad65ced2ba9c4c84a1671530114e8b5b2242e4c4d77f12e64102992ef38380fea267db25b70873a35ffe64c8cd23d026378175eb680eaef1844a91d56dded8
-
SSDEEP
12288:lEI+crmlX4jVr0ZS3nWGlAQN80IESvcYvXI7+78wzk81ZbwivNABXc2ARZSsPd+:jXrmyJYCnWm00ZSv1XIe8wzk879vgXc+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b0656f9cf50dc714afde3336f6b4680
Files
-
9b0656f9cf50dc714afde3336f6b4680.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 671KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE