Behavioral task
behavioral1
Sample
b9d5d19d5032dfbb4c7818bd2296c174291263097f2b9617b6f4079fe98fd8b7.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
b9d5d19d5032dfbb4c7818bd2296c174291263097f2b9617b6f4079fe98fd8b7.exe
Resource
win10v2004-20241007-en
General
-
Target
b9d5d19d5032dfbb4c7818bd2296c174291263097f2b9617b6f4079fe98fd8b7
-
Size
12.0MB
-
MD5
34fe0ccfcfd07d57c37a86f781fe7025
-
SHA1
0da7aa3ecf9a42ce86b54094475451d370cadd43
-
SHA256
b9d5d19d5032dfbb4c7818bd2296c174291263097f2b9617b6f4079fe98fd8b7
-
SHA512
a97aea7d4e81fda0d848275dae598a8039bcc621248cde7f5f3a84b7ae70de674f9fdc0af1b7da30338acfb5c84892a227f486f8d809e09aa2de8b049ae4864a
-
SSDEEP
196608:avSCg5aduB2ZoQ64Nkid38GHb65Q5ySeBZObIzLd6/8Nad4OzlUS6FRIb93WenpA:agcEQ3dvQQISeBdzpc8Nat2MZ3WYtL8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9d5d19d5032dfbb4c7818bd2296c174291263097f2b9617b6f4079fe98fd8b7
Files
-
b9d5d19d5032dfbb4c7818bd2296c174291263097f2b9617b6f4079fe98fd8b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 939KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE