Behavioral task
behavioral1
Sample
9fee474fffd9aba72eeca12be503381e313be552503bc31e3c8ec2b02ec2fdb5N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9fee474fffd9aba72eeca12be503381e313be552503bc31e3c8ec2b02ec2fdb5N.exe
Resource
win10v2004-20240802-en
General
-
Target
9fee474fffd9aba72eeca12be503381e313be552503bc31e3c8ec2b02ec2fdb5N
-
Size
69KB
-
MD5
95356131bc26f2c18823244672860b50
-
SHA1
7d9d823309a139d071a8868061eb68a055c13468
-
SHA256
9fee474fffd9aba72eeca12be503381e313be552503bc31e3c8ec2b02ec2fdb5
-
SHA512
c4a03d0e8b6380b2952bdd29b5ea667edfa85cc877dc57be6fe62ef932b99b57af65eca88a47a67699ec7e6561878f0729403c2fc88ee9eeccf827dd4adcf00b
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2r7:V7Zf/FAxTWtnMdyGdyoIOIXMAMu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fee474fffd9aba72eeca12be503381e313be552503bc31e3c8ec2b02ec2fdb5N
Files
-
9fee474fffd9aba72eeca12be503381e313be552503bc31e3c8ec2b02ec2fdb5N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE