Behavioral task
behavioral1
Sample
9bf335011e2d521c43553e2e9e800677.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9bf335011e2d521c43553e2e9e800677.exe
Resource
win10v2004-20231215-en
General
-
Target
9bf335011e2d521c43553e2e9e800677
-
Size
157KB
-
MD5
9bf335011e2d521c43553e2e9e800677
-
SHA1
76847e0e9a65d703f5cb549f27f48a8d3f652729
-
SHA256
9420735f0f681ab57d0ddf2e3b8ac8c1249b174487229aaa5934ce4af0edcdf7
-
SHA512
d3c1e62fb4d9b255fa8e1fbde59a12cf6999f44442c940cf64b08413c52e1cd67a7293080573000069b6b7927b93ffd7d478a8083a84b7f7a85c180f40e0c8a6
-
SSDEEP
3072:kdRjZdfJaxe3SXsm/z+gLZOMhZdv+lQ8kgMi/+ruFsNGLo:SRVasCX9mU1IQ8kK+ru1Lo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bf335011e2d521c43553e2e9e800677
Files
-
9bf335011e2d521c43553e2e9e800677.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TEXT Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ