Behavioral task
behavioral1
Sample
9c224fbd34cf16ac8efdb9469dfdc387.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c224fbd34cf16ac8efdb9469dfdc387.exe
Resource
win10v2004-20231215-en
General
-
Target
9c224fbd34cf16ac8efdb9469dfdc387
-
Size
1.8MB
-
MD5
9c224fbd34cf16ac8efdb9469dfdc387
-
SHA1
1db14261befeafcd1bdb5d58790dac4686cd8807
-
SHA256
9c60813b3befa284391b02998b1ad34620cbe22cf340439f26b2436ae40e9feb
-
SHA512
7daf242e8c19acde900f1682e06a25b4ac8a6f88a949c6bfa9a751c0a6e9e1fe51e68f34d212cb89bcbf1d4d62b905763a62a8bd5636cee63dbbb515cdee0675
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxq9:SCqm2Jpr0nNM7Dus7NxM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c224fbd34cf16ac8efdb9469dfdc387
Files
-
9c224fbd34cf16ac8efdb9469dfdc387.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE