Behavioral task
behavioral1
Sample
9978d7a2c112788586549f2589d6aeae1998d10223ae8579b95b3cbafece5089.exe
Resource
win7-20240903-en
General
-
Target
9978d7a2c112788586549f2589d6aeae1998d10223ae8579b95b3cbafece5089
-
Size
1.7MB
-
MD5
dc84ad3e09f4a2fbd3a7bc982fc13b54
-
SHA1
dad6729d6c347156bea856f4f973d4b61a923436
-
SHA256
9978d7a2c112788586549f2589d6aeae1998d10223ae8579b95b3cbafece5089
-
SHA512
72e17484bd92ebaba01d3c0ae7ba33a0470b15039ee9f78119ee4bb61e3327c82ec8b1ddddfae08cb6bb3f449b5700a3d3ef47cd78d55147f6b0b62fa5c55d51
-
SSDEEP
49152:AgbhGguzfN3N4rU4I69Jbfjuy8+Z+eSlX:v3EFd4rDI6LfSL/l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9978d7a2c112788586549f2589d6aeae1998d10223ae8579b95b3cbafece5089
Files
-
9978d7a2c112788586549f2589d6aeae1998d10223ae8579b95b3cbafece5089.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 948KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE