Behavioral task
behavioral1
Sample
9348b669ac5aebb6999c794bcd93fab9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9348b669ac5aebb6999c794bcd93fab9.exe
Resource
win10v2004-20240319-en
General
-
Target
9348b669ac5aebb6999c794bcd93fab9
-
Size
460KB
-
MD5
9348b669ac5aebb6999c794bcd93fab9
-
SHA1
5af0bfe7d3ad4bf51435fa07769a97d43e24c415
-
SHA256
de28fa152c8c343e1847d4bfc95d0b625594ef6c67ea842fbe6b67aec6c5b2c3
-
SHA512
fe0c8dfcf0e161d4c567657a0ed6109020be6cc94bb790dc9ca3c7c5ac9aee4452c77eeae16471edf21b5bf8ee8e74a065acd755aaf74dcaaa7238bc5b8fc1a5
-
SSDEEP
12288:sPKLXqV4TKnvH84gFe911O9EldhqHo+ndrxj5qb8U8hm:sSLg4SEWfJLhqH/dl5q+m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9348b669ac5aebb6999c794bcd93fab9
Files
-
9348b669ac5aebb6999c794bcd93fab9.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB