Behavioral task
behavioral1
Sample
c9e8c2f6e9e1ff3b287246d8fdd9ffaf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9e8c2f6e9e1ff3b287246d8fdd9ffaf.exe
Resource
win10v2004-20240226-en
General
-
Target
c9e8c2f6e9e1ff3b287246d8fdd9ffaf
-
Size
2.9MB
-
MD5
c9e8c2f6e9e1ff3b287246d8fdd9ffaf
-
SHA1
a1de439110a7450be02c69d077ef4b1752c3c29c
-
SHA256
aad83f22a1d49b9f3b6aa8f5855e43d0152dc07e87bc28735ece7d52cd529afc
-
SHA512
d16f5874657aa848222c8e0838365a6c30bda9378a37d15c7c345e9d7c58e372f88d88d1a42cc7fc0ad3bcee9c3a2aa16bc86cf40542d5cd06d877246a266258
-
SSDEEP
49152:vJ+PIxLJyGWEdJXy5xC1ukf/TjZlI7TN62ljPd/76iAGxQ7sfce58VOUQgQNGJn:h+PIxiz5xC15/Zlwg2jGiWaFIOUTpn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9e8c2f6e9e1ff3b287246d8fdd9ffaf
Files
-
c9e8c2f6e9e1ff3b287246d8fdd9ffaf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE