Behavioral task
behavioral1
Sample
9b3e6970ebe5d6583e90c834215442ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b3e6970ebe5d6583e90c834215442ca.exe
Resource
win10v2004-20231215-en
General
-
Target
9b3e6970ebe5d6583e90c834215442ca
-
Size
869KB
-
MD5
9b3e6970ebe5d6583e90c834215442ca
-
SHA1
979e6cb0451d061600aba2df29fff181eead2744
-
SHA256
dd074f874767c8b2b7cac7e8bad2d5e1c84db30c676b69eb714ad64b5e29a37f
-
SHA512
b667e62f4627fc03fdca0bd331247a9ac5aa7463ec5fff34a7527eb837fa5e60cac120c13cef4fedef48da48d34630bb2f74794975352247c3d485c74ecf1592
-
SSDEEP
24576:YkIx8vzDzFUNxWZ0nDcWTsjHMSSq4RHV:287FU6kAW4jHE3tV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b3e6970ebe5d6583e90c834215442ca
Files
-
9b3e6970ebe5d6583e90c834215442ca.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 850KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE