Behavioral task
behavioral1
Sample
9b8294439b96bc9d98cdee7e4e83f6d4d72edb7d348b504d8ed4f2d59736f858.exe
Resource
win7-20240221-en
General
-
Target
9b8294439b96bc9d98cdee7e4e83f6d4d72edb7d348b504d8ed4f2d59736f858
-
Size
85KB
-
MD5
e16bf40d1a49a1f9d2610acde8025810
-
SHA1
a2b484c184f2c0aaa9454baeca28ea23c7605bf1
-
SHA256
9b8294439b96bc9d98cdee7e4e83f6d4d72edb7d348b504d8ed4f2d59736f858
-
SHA512
82dd15e7d6bf664ef9f218c55f4f5dd1c2a27691529247a540656dff0f2b9338de5052109ae8f65cf7bac3d79337ce45ecfc5fea7e59db680d9107bf6a810fb6
-
SSDEEP
768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmh:8vm1AeT7BVwxfvLFwjRh
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b8294439b96bc9d98cdee7e4e83f6d4d72edb7d348b504d8ed4f2d59736f858
Files
-
9b8294439b96bc9d98cdee7e4e83f6d4d72edb7d348b504d8ed4f2d59736f858.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE