Behavioral task
behavioral1
Sample
9a69f83425592831016607faa77dbc7c757aab4f29b7e4246a8b97007238967aN.exe
Resource
win7-20240903-en
General
-
Target
9a69f83425592831016607faa77dbc7c757aab4f29b7e4246a8b97007238967aN
-
Size
144KB
-
MD5
bc1f082be5fdaf484196f4e4076b5b60
-
SHA1
04ecfee30a8bdef61da1b2d6ea9c2543d19c8bfa
-
SHA256
9a69f83425592831016607faa77dbc7c757aab4f29b7e4246a8b97007238967a
-
SHA512
0ee9b57d8961c890c1834d4f9bbb2d0ef3ea2d3627410138fec39bdf9e61b0587e19b3678642ef7e332252c42c956b0967c443c2f212e2ca49198ef087ca8ad1
-
SSDEEP
1536:V7Zf/FAxTWoJJ7Tw4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+p0Rp1:fny1vWHIjN3tj6qnv0b2UrXkbvLB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a69f83425592831016607faa77dbc7c757aab4f29b7e4246a8b97007238967aN
Files
-
9a69f83425592831016607faa77dbc7c757aab4f29b7e4246a8b97007238967aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE