Behavioral task
behavioral1
Sample
9b7fc359a6c20aa1f350894240d37374.exe
Resource
win7-20231215-en
General
-
Target
9b7fc359a6c20aa1f350894240d37374
-
Size
784KB
-
MD5
9b7fc359a6c20aa1f350894240d37374
-
SHA1
fa3d7b2d5c254c1baa7079ea0e31a3b03f7cff06
-
SHA256
273c8a7676c1e3495d09ac49854e66a842364ec95b430beffb9819531dc65b42
-
SHA512
ece0ac594bcccd4628fc0b77fb29645c4b9554c5e833a3e58fb69bcb8b2e3907466ec3f642da2634756648bc7c591db5382567d814a8ef4d2ae6b22be1a102e0
-
SSDEEP
12288:goF93psQXLe1932YzpqH4ryswzdS+vPMRnVqZuCZiN/wIf4LZ4H34kXDTfYSDWJW:jFs1GUpqH4rypzpvknte/4H1zDYRl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b7fc359a6c20aa1f350894240d37374
Files
-
9b7fc359a6c20aa1f350894240d37374.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE