Behavioral task
behavioral1
Sample
9122ee4e117aeb3698e030a4f3e1433a1efff2c470b02c17a913b95f3aa5da4b.exe
Resource
win7-20240903-en
General
-
Target
9122ee4e117aeb3698e030a4f3e1433a1efff2c470b02c17a913b95f3aa5da4b
-
Size
3.8MB
-
MD5
9d01ffa491b537edc13897779c5fbee1
-
SHA1
cedb8cf04f901aff80b4a4e651b53df1eb766f21
-
SHA256
9122ee4e117aeb3698e030a4f3e1433a1efff2c470b02c17a913b95f3aa5da4b
-
SHA512
c8c1c1fc915b4371714f4e1b21fdc7f61c93eb193274cefa58637aee07401368263ab784fd18e744deb518997133c1b00026485146108f3fca280fc77805f292
-
SSDEEP
98304:3i4hTLOMtHDMlANqnfVGPyhcMYg4lSiSLCQrdGLcjFjj/eWKS5h7EleIljztU/qK:3i4hTLOMtHDMlANqnfVGPyhcMYg4lSiU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9122ee4e117aeb3698e030a4f3e1433a1efff2c470b02c17a913b95f3aa5da4b
Files
-
9122ee4e117aeb3698e030a4f3e1433a1efff2c470b02c17a913b95f3aa5da4b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE