Behavioral task
behavioral1
Sample
9b81cd810d0d5df83421566be57d8c43d50fab258c94339200e70a82f8806805.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9b81cd810d0d5df83421566be57d8c43d50fab258c94339200e70a82f8806805.exe
Resource
win10v2004-20241007-en
General
-
Target
9b81cd810d0d5df83421566be57d8c43d50fab258c94339200e70a82f8806805.exe
-
Size
41KB
-
MD5
be3341e79b2f12499de7c15ca4ec94a7
-
SHA1
f776f7211c191ea6e0a94f01a41009bf4e62506c
-
SHA256
9b81cd810d0d5df83421566be57d8c43d50fab258c94339200e70a82f8806805
-
SHA512
68bfd6a214dc0a52cbf422c59652992190046d1db5c1f79462fae12b9b72e96dbbb63f69953a0c3ed290e15426f1447ccf2d5e1dac72b9a2b749a142b9de837a
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/M:AEwVs+0jNDY1qi/qE
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9b81cd810d0d5df83421566be57d8c43d50fab258c94339200e70a82f8806805.exe
Files
-
9b81cd810d0d5df83421566be57d8c43d50fab258c94339200e70a82f8806805.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE