Behavioral task
behavioral1
Sample
9a4db0d86e78e958a936b9c111f05580N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9a4db0d86e78e958a936b9c111f05580N.exe
Resource
win10v2004-20240709-en
General
-
Target
9a4db0d86e78e958a936b9c111f05580N.exe
-
Size
534KB
-
MD5
9a4db0d86e78e958a936b9c111f05580
-
SHA1
d9f2806643a2a7e30d4f495c84fadbebcbe2c65e
-
SHA256
379e9fddce61caf405ea5a8091aa4023eb53a4daffb58c4962e0c3f9cf654972
-
SHA512
3b17b42b9ab482b51a33686f66437d23d99600ee05e066406d46af49e817afdb69b075c83bc35bbc6e215d3a7af596010afbadca21a9b6ba5a58c0af30dd8d5e
-
SSDEEP
12288:lXpqhdWGWRVWmM6d6H0Ew6u8xvEspJJN8rf9YWLG:lUdTM46d6HHw6u+dpRwf9YWLG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a4db0d86e78e958a936b9c111f05580N.exe
Files
-
9a4db0d86e78e958a936b9c111f05580N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE