Behavioral task
behavioral1
Sample
a9f5313e229b00e6a843d25e875b6169.exe
Resource
win7-20240221-en
General
-
Target
a9f5313e229b00e6a843d25e875b6169
-
Size
784KB
-
MD5
a9f5313e229b00e6a843d25e875b6169
-
SHA1
6580f14a36e9cddec95d9447bb3827b04d53fe6b
-
SHA256
20a644037b48a035a154133235c57bfd850fc325ce88cd064e5fe612162c367d
-
SHA512
a65c9ad2caca859dc24a2384f518f58f9bcb1bf738c229825d3b3c283b3d8252a1d95913b53df01b714e8289a2d23f256d034dd3a60c14601d75550904c9b769
-
SSDEEP
12288:PtotpvmuoByUONDa6ku6VG2jyuMVzTBGU/xcEoYWgMPRQqg3s2LMDpOKntmcBH9N:PIvmh4BMG2jqBZcDYWVCEsMtmcB6D4M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9f5313e229b00e6a843d25e875b6169
Files
-
a9f5313e229b00e6a843d25e875b6169.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE