Behavioral task
behavioral1
Sample
a9e9a7a0b01ef065e68e0038280d7b49.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9e9a7a0b01ef065e68e0038280d7b49.exe
Resource
win10v2004-20240226-en
General
-
Target
a9e9a7a0b01ef065e68e0038280d7b49
-
Size
6KB
-
MD5
a9e9a7a0b01ef065e68e0038280d7b49
-
SHA1
dfc2c5fe6ec13bef603e996186f33deaa0270953
-
SHA256
6eee3099bea89654780500bfc6809f314b9c3d46f5eb82adad317318ee954d6e
-
SHA512
be9ee020ce3aa4c6617e07d7aa2b2f4761808fcba1fab407679dd95e6ede2c02fdcbc4fdc0d0166f9667da148289eb3a09c211eb1313dc9ef0898f0c24a3514e
-
SSDEEP
96:eKWC/+hbaIlju6KVni80z845dFfuWbH5pCKBVFiuG1Z:eKWCubaIljPKVAz845dU65pfH2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9e9a7a0b01ef065e68e0038280d7b49
Files
-
a9e9a7a0b01ef065e68e0038280d7b49.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE