Behavioral task
behavioral1
Sample
c9bc523221b4f31408629d060ed0feca99ead89691c8cf32033b470405b30f11N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c9bc523221b4f31408629d060ed0feca99ead89691c8cf32033b470405b30f11N.exe
Resource
win10v2004-20240802-en
General
-
Target
c9bc523221b4f31408629d060ed0feca99ead89691c8cf32033b470405b30f11N.exe
-
Size
91KB
-
MD5
da54f0f4536ca2e981d924fe33f8a500
-
SHA1
db69f000dac67ea7d266bf406edaeb0dcd8e1511
-
SHA256
c9bc523221b4f31408629d060ed0feca99ead89691c8cf32033b470405b30f11
-
SHA512
033fb987d8c83c34ef2433b9e23f9fd6bb7605237b1d870a6155d91827cea9c434676bb15679e674a3a93f266a07a47013541c9a5fd6ebcc517c1e1f3c36771d
-
SSDEEP
1536:jRsjdEIUFC2p79OCnouy8VDBRsjdEIUFC2p79OCnouy8VDm:jOm9CshoutdBOm9Cshoutdm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9bc523221b4f31408629d060ed0feca99ead89691c8cf32033b470405b30f11N.exe
Files
-
c9bc523221b4f31408629d060ed0feca99ead89691c8cf32033b470405b30f11N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE