Behavioral task
behavioral1
Sample
Malicious_0b7f41cd27d7629a2c1e1012ff5c45e5b2f8520d3f18b5154c78cbb002240449.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Malicious_0b7f41cd27d7629a2c1e1012ff5c45e5b2f8520d3f18b5154c78cbb002240449.exe
Resource
win10v2004-20230703-en
General
-
Target
Malicious_0b7f41cd27d7629a2c1e1012ff5c45e5b2f8520d3f18b5154c78cbb002240449.dontrunthis
-
Size
3.7MB
-
MD5
eaee0e79a8765e401f04cd70f24d5648
-
SHA1
37eeb0181e5338665f1e86b7fae74e13d57c53eb
-
SHA256
746a6ed0905e5525dc2b5251b7ebfe80fa1630162f9bf6741da0835f4dcc777c
-
SHA512
9a5f15ccb2f04e7d188ab4e33232ab7bb9c47f32a931646fcfde079e65c4daa673d958019b4c091d5dd357c2af9d2b6f441692398262e571f97e648d42b76cf3
-
SSDEEP
98304:EjBxcO4EYaOiWjBxcO4EYaOiWjBxcO4EYaOiWjBxcO4EYaOiWjBxcO4EYaOiWjB2:EjBxcO4qOiWjBxcO4qOiWjBxcO4qOiWQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_0b7f41cd27d7629a2c1e1012ff5c45e5b2f8520d3f18b5154c78cbb002240449.dontrunthis
Files
-
Malicious_0b7f41cd27d7629a2c1e1012ff5c45e5b2f8520d3f18b5154c78cbb002240449.dontrunthis.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ