Behavioral task
behavioral1
Sample
9bf3d07c55fd6ddb63d691da8f745cbe.exe
Resource
win7-20231215-en
General
-
Target
9bf3d07c55fd6ddb63d691da8f745cbe
-
Size
555KB
-
MD5
9bf3d07c55fd6ddb63d691da8f745cbe
-
SHA1
ef4519a315356fb01c9ae71576d1136790f675a1
-
SHA256
eb0ba2ec297127fb46594483b3eb083e37ba2506cc0a398598acdcfb030504b7
-
SHA512
fc32673d36cb702db88bf1185504eeadc79d910367c5d4c4772575cdfca4ffcce978d2dd23885dfb844e6cdeff43ef8fa3bd3b4c9c704359ebe9ee145650029d
-
SSDEEP
12288:CSOXW7zrKQvLRG5nsT2dX6dZ5J8pblqnPNmZtkDyfuf/IbUmF5gQsZh:mW7iGof+eVlCP8eciyJiQsZh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bf3d07c55fd6ddb63d691da8f745cbe
Files
-
9bf3d07c55fd6ddb63d691da8f745cbe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE