Behavioral task
behavioral1
Sample
9be04db4acbbd230bc9dd6ce376c0dfb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9be04db4acbbd230bc9dd6ce376c0dfb.exe
Resource
win10v2004-20231215-en
General
-
Target
9be04db4acbbd230bc9dd6ce376c0dfb
-
Size
802KB
-
MD5
9be04db4acbbd230bc9dd6ce376c0dfb
-
SHA1
b67fa8d2a664b2f6d05fdc6dfc33dd2166087f1d
-
SHA256
6a276a05da4daef28a883ebacd6ea87f6a2d6a82876f11b5fa8e6a2366c2c186
-
SHA512
56c850269def039a817434273be50927c99072142e5419c5410901ae0e87fb83ecd790bf73de1bc4dbf0d1399b093a0b5ff9cf46448f6d212829d6035651f283
-
SSDEEP
12288:57W2Ndzn0Rxz4P29iDasEWjU+3wt5Eo0ZMda42nkVIEEemyS6hCHNpFCN/9oS:Q2jzqCPMi1wtAkaouB6hypW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9be04db4acbbd230bc9dd6ce376c0dfb
Files
-
9be04db4acbbd230bc9dd6ce376c0dfb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 490KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE