Behavioral task
behavioral1
Sample
00875b79c78f1b3171f4089ce618b72a17f32b89baf2117e9aa8aa39809ca2d1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
00875b79c78f1b3171f4089ce618b72a17f32b89baf2117e9aa8aa39809ca2d1.exe
Resource
win10v2004-20230703-en
General
-
Target
00875b79c78f1b3171f4089ce618b72a17f32b89baf2117e9aa8aa39809ca2d1
-
Size
3.3MB
-
MD5
da08da80de1913e81a365b5bc6265fa2
-
SHA1
24b2f7868207c1bf26243383d8288b5fa710049f
-
SHA256
00875b79c78f1b3171f4089ce618b72a17f32b89baf2117e9aa8aa39809ca2d1
-
SHA512
636e93bd7b9b0dc847185234b07f2bb9271a1f3b3dc0cb1f54594d0f4298590c9f9f1f4fd715b29471c0dfd3401214d7d084bc505afa961d0dc6457fa9eafda8
-
SSDEEP
49152:CgFhwxj9pbkwt4Hku5sgfjyInaIMRutaoLUq:W99pIS4EesOmInxMYtV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00875b79c78f1b3171f4089ce618b72a17f32b89baf2117e9aa8aa39809ca2d1
Files
-
00875b79c78f1b3171f4089ce618b72a17f32b89baf2117e9aa8aa39809ca2d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 832KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE