Behavioral task
behavioral1
Sample
b9734a11fd7192db8e49aaf5203a9281.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9734a11fd7192db8e49aaf5203a9281.exe
Resource
win10v2004-20240226-en
General
-
Target
b9734a11fd7192db8e49aaf5203a9281
-
Size
37KB
-
MD5
b9734a11fd7192db8e49aaf5203a9281
-
SHA1
bf717e41f08c7706b75ffacf0cfbe77088b14f89
-
SHA256
8773d7aed75c53b42657375292cc829c65418a633f50bc52a475872fbeb0fb85
-
SHA512
6851fc49e39a3c0f8ec37d61d3db59e255bc5cc15ab45016f68ea54f2c5bc2d0bab7fe7ac917d16080d9969d49f27e6b85fd217ad4cc46f06f2c18b2da4d6f97
-
SSDEEP
768:001qVPcFy1Iuvgtyqws27xg7nbcuyD7UddoFkTXIiRvY4FQ5wx4A:0oSP2UYl24nouy8Dou7IiFY4O5wx4A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9734a11fd7192db8e49aaf5203a9281
Files
-
b9734a11fd7192db8e49aaf5203a9281.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 23KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE