Behavioral task
behavioral1
Sample
9096205694035a6239ddf7f5e8401dc29a8d2ef0f34c92ce8a5d0752c626cdd4.exe
Resource
win7-20240903-en
General
-
Target
9096205694035a6239ddf7f5e8401dc29a8d2ef0f34c92ce8a5d0752c626cdd4
-
Size
2.5MB
-
MD5
2479493bfc66ac0d4d8ffeeced3157fc
-
SHA1
78e73b0a50520a298a0a185432d5102b1d5947ce
-
SHA256
9096205694035a6239ddf7f5e8401dc29a8d2ef0f34c92ce8a5d0752c626cdd4
-
SHA512
e6dada03f4a674e1d75ab204ef8738ad5927d9e1e02afe07815c40e3127bdbf233a95f22bf6d5b51b5ab66cab0df9b0cc16db3a4e7dc5652dc2e5431339ad585
-
SSDEEP
49152:oX15KZuzXBV0LUSHonsrXXRNv0cjaPV88XszwwL7nqk:y5KJpZJu5Eqk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9096205694035a6239ddf7f5e8401dc29a8d2ef0f34c92ce8a5d0752c626cdd4
Files
-
9096205694035a6239ddf7f5e8401dc29a8d2ef0f34c92ce8a5d0752c626cdd4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE