Behavioral task
behavioral1
Sample
9b28a3f6a421699b76f4cadf8be74b1954167c046b4b83b420b66cf880fdb2db.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9b28a3f6a421699b76f4cadf8be74b1954167c046b4b83b420b66cf880fdb2db.exe
Resource
win10v2004-20240802-en
General
-
Target
9b28a3f6a421699b76f4cadf8be74b1954167c046b4b83b420b66cf880fdb2db
-
Size
1.5MB
-
MD5
bc3afa62f6a21f4839377a8fc583bb63
-
SHA1
97ab8fe0cfcef1ef399fa2038239313a66266eca
-
SHA256
9b28a3f6a421699b76f4cadf8be74b1954167c046b4b83b420b66cf880fdb2db
-
SHA512
d643fec9a923c25f214c068da4dccc0dac082ee235f8cddd3ce203497afba79e917e6f516c7b199d46a0f5277dc994c3ff0090360bb2272aa6a6dab37d681a55
-
SSDEEP
24576:rzwArLT5Nyxkqwo/PldaEQWKzboAGMEb7pGgsZNlbnT4AdilXKPnAn+sCTyIVcBw:rP1gx/woeEQNoAGb/ZsZzbipKohCN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b28a3f6a421699b76f4cadf8be74b1954167c046b4b83b420b66cf880fdb2db
Files
-
9b28a3f6a421699b76f4cadf8be74b1954167c046b4b83b420b66cf880fdb2db.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE