Behavioral task
behavioral1
Sample
9cb7816cd61ee75db81c9ceb6b0206f06adb78ff12ed6d23a1c984f49a25201f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9cb7816cd61ee75db81c9ceb6b0206f06adb78ff12ed6d23a1c984f49a25201f.exe
Resource
win10v2004-20240611-en
General
-
Target
9cb7816cd61ee75db81c9ceb6b0206f06adb78ff12ed6d23a1c984f49a25201f
-
Size
38KB
-
MD5
30d26157aad2b2da8691cd90a7e0217c
-
SHA1
d2f04b1236b3b7529bf5851bc9a515065ef60c3a
-
SHA256
9cb7816cd61ee75db81c9ceb6b0206f06adb78ff12ed6d23a1c984f49a25201f
-
SHA512
b5c5be1766ff89c4bb427ae4f688d7b52a7c43503030a8327fcc0369c616029d392f401d1ff730bc287c626a3358419e2249c8c1b078243a333a60f732db52de
-
SSDEEP
768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcuX9km9k/fxRfxlk9:CTW8OmO/fxRfxGgo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 9cb7816cd61ee75db81c9ceb6b0206f06adb78ff12ed6d23a1c984f49a25201f unpack001/out.upx
Files
-
9cb7816cd61ee75db81c9ceb6b0206f06adb78ff12ed6d23a1c984f49a25201f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ