Behavioral task
behavioral1
Sample
c9cbf83a01289113e74c876b6de0b806.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9cbf83a01289113e74c876b6de0b806.exe
Resource
win10v2004-20240226-en
General
-
Target
c9cbf83a01289113e74c876b6de0b806
-
Size
302KB
-
MD5
c9cbf83a01289113e74c876b6de0b806
-
SHA1
734356552014a36435098d2615c1876459e9fade
-
SHA256
0554bb5d6d594fc93e1696cf1b860668d7270a1ea1c095a1bd6396acae4be087
-
SHA512
f089b1f885caa29545b490bf3c678f6bf9065e3bb4bf9f2ffc9558d14da1456e8b1ba6840f0799fbf5705c10e2f71e3a7f3a839d228b7ddd62921b857f9b7532
-
SSDEEP
6144:h1jAhDHRH3cHCeteZj9yPHyJ3xCDLjSitUSJi9RiTgmQ:7AhDHBqJeZjskxwvGSUiEm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9cbf83a01289113e74c876b6de0b806
Files
-
c9cbf83a01289113e74c876b6de0b806.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE