Behavioral task
behavioral1
Sample
9c070b36fe8f1da9f69e3442ef47faf8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c070b36fe8f1da9f69e3442ef47faf8.exe
Resource
win10v2004-20231215-en
General
-
Target
9c070b36fe8f1da9f69e3442ef47faf8
-
Size
517KB
-
MD5
9c070b36fe8f1da9f69e3442ef47faf8
-
SHA1
3b41b6e029cc9a55a82a95e4f2f5b10b797d4e56
-
SHA256
5ffcbf7f98d24ade6186f880e40ddbb00db696ed150e036381fe4f1221ba7cab
-
SHA512
8e441635c802a3251e47ae96e8606f9f01cbe85d340ef2da9ec03cd859f6783654641c335597a711281bc26c44217e2e29483e4d4b83fdbc67251dfba68a4e86
-
SSDEEP
6144:lp1vd5qewqdHaQ3AbN/0ZOJxlVPzGyPCJxP6BT8HpJvp7aUDoSDWzHgFDbpLtvvQ:ljvBB0Q4/bxlFJPCJDjRWmoSAgF5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c070b36fe8f1da9f69e3442ef47faf8
Files
-
9c070b36fe8f1da9f69e3442ef47faf8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 293KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE