Behavioral task
behavioral1
Sample
b9725e0d9d8092a628e1f10a1797350b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b9725e0d9d8092a628e1f10a1797350b.exe
Resource
win10v2004-20240226-en
General
-
Target
b9725e0d9d8092a628e1f10a1797350b
-
Size
29KB
-
MD5
b9725e0d9d8092a628e1f10a1797350b
-
SHA1
64154e74a0fd22d34fee1ada36b2205115fe2a56
-
SHA256
ed3a0bfab7c041e026b4486acd4d8aaf892f449e7b4b3bdeda09ec8443c42798
-
SHA512
1759b23efa721e1f59e9022f2b2d2208ade0d6882fb6a5d80fa09a2141743f7af06a2b8e1b0d101eee8cd4a32160082982341238c357e30a9b8215c2f503eb71
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEF6:SKcR4mjD9r823F6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9725e0d9d8092a628e1f10a1797350b
Files
-
b9725e0d9d8092a628e1f10a1797350b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE