Behavioral task
behavioral1
Sample
9e681716843ee79d6508c402046dcc8b13d6111b0c5affe266307292c893a832N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9e681716843ee79d6508c402046dcc8b13d6111b0c5affe266307292c893a832N.exe
Resource
win10v2004-20240910-en
General
-
Target
9e681716843ee79d6508c402046dcc8b13d6111b0c5affe266307292c893a832N
-
Size
2KB
-
MD5
0ed3a8d3991bca90ce9ddf3491470e90
-
SHA1
fa45e54273f2b13300a69e00ca38b67d7eb4b5db
-
SHA256
9e681716843ee79d6508c402046dcc8b13d6111b0c5affe266307292c893a832
-
SHA512
ab317e3e9e6ad276ec8fc2200827e7324e4854695b5597219d16c3d84ed5ae1949a56f90e9a43251db6978e0890afebb5601a39471ce9a1dcd5984526a59b33f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e681716843ee79d6508c402046dcc8b13d6111b0c5affe266307292c893a832N
Files
-
9e681716843ee79d6508c402046dcc8b13d6111b0c5affe266307292c893a832N.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE