Behavioral task
behavioral1
Sample
9d11de54dac4699ca756d7fe865bed2f2361a0ea7f404e19898da2f7c9b41906.exe
Resource
win10v2004-20240508-en
General
-
Target
9d11de54dac4699ca756d7fe865bed2f2361a0ea7f404e19898da2f7c9b41906
-
Size
651KB
-
MD5
0ef4fecb574ae751d060617c7c189afb
-
SHA1
0e67b5f72b1b3b498fbc6c5adf3a09db12c260d5
-
SHA256
9d11de54dac4699ca756d7fe865bed2f2361a0ea7f404e19898da2f7c9b41906
-
SHA512
6bc1b73eab51cabc74948738b77b409e1f5434f6316cbcea8be089ed826f85b7e48fefb76b7e655bdb42786a234389e946deb78f7f8b588efa85a4ab42e53101
-
SSDEEP
12288:mptTCYQXWGgvjoLnJvSRdsZviQgdUMqWUOcEDHAAe3DuIBo0Xb6BznhoS1:m8X0jomsoQgVqWUOrgTafz5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d11de54dac4699ca756d7fe865bed2f2361a0ea7f404e19898da2f7c9b41906
Files
-
9d11de54dac4699ca756d7fe865bed2f2361a0ea7f404e19898da2f7c9b41906.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 944KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ