Behavioral task
behavioral1
Sample
9e919adb68f8e52a886cc8da8e11bdcc539fe5d6aeaeaca1a691c3240d21cfe4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9e919adb68f8e52a886cc8da8e11bdcc539fe5d6aeaeaca1a691c3240d21cfe4.exe
Resource
win10v2004-20240508-en
General
-
Target
9e919adb68f8e52a886cc8da8e11bdcc539fe5d6aeaeaca1a691c3240d21cfe4
-
Size
2.5MB
-
MD5
99df1adea96e516ba6cd18444e428ca2
-
SHA1
4be72905e6d0870823bf86fdd627b0faaee47b57
-
SHA256
9e919adb68f8e52a886cc8da8e11bdcc539fe5d6aeaeaca1a691c3240d21cfe4
-
SHA512
6a3f70c86dba95feba56ffa8e2bc619511b4ed1d3bd674e3bde485339a4982aefc2a726f21fd2af78e5f94568a3a4eef1a5339c933d00f190ec6ba79b8bb330e
-
SSDEEP
24576:CMmL+js+3Wvpw8x+UdNNBo44xS7LyAVnipiFVt8l76HNTe9BmTQk3lr2PQFd+WQq:jmL+Z3Wvpw8x+UPMElH3tUvk1qzkl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e919adb68f8e52a886cc8da8e11bdcc539fe5d6aeaeaca1a691c3240d21cfe4
Files
-
9e919adb68f8e52a886cc8da8e11bdcc539fe5d6aeaeaca1a691c3240d21cfe4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE