Behavioral task
behavioral1
Sample
9fe50d64277929e9ab0f3667812c2c16e9ccd28bdce6ae718d8662e930cdfbb8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9fe50d64277929e9ab0f3667812c2c16e9ccd28bdce6ae718d8662e930cdfbb8.exe
Resource
win10v2004-20240508-en
General
-
Target
9fe50d64277929e9ab0f3667812c2c16e9ccd28bdce6ae718d8662e930cdfbb8
-
Size
710KB
-
MD5
681f6949b93418f6b3124fc563d68dbd
-
SHA1
009cdaf002475437b86ffb6397954c7a1f4afb2c
-
SHA256
9fe50d64277929e9ab0f3667812c2c16e9ccd28bdce6ae718d8662e930cdfbb8
-
SHA512
d403403651791b68e4bb75ca08cec54b87d912405d1e57c46177227b21d863f3fe0bebcd46b91707b405c34756610ab3a8cc5427d54dabfa54c164d347c9aa3f
-
SSDEEP
12288:MeFyEOQGBagG/iRMel6RyX5OlivrUKpjEQzGu96ksoSlRb4dQwL:9FFOQG8gG/M6RQ5OlivrZpIQqu9zcRbG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fe50d64277929e9ab0f3667812c2c16e9ccd28bdce6ae718d8662e930cdfbb8
Files
-
9fe50d64277929e9ab0f3667812c2c16e9ccd28bdce6ae718d8662e930cdfbb8.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 506KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE