Behavioral task
behavioral1
Sample
0c3e2440057bbbccffa8b7cf745aa1ed24e746cb76cb795b5af33ce78ce2f9b8.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0c3e2440057bbbccffa8b7cf745aa1ed24e746cb76cb795b5af33ce78ce2f9b8.exe
Resource
win10v2004-20230703-en
General
-
Target
0c3e2440057bbbccffa8b7cf745aa1ed24e746cb76cb795b5af33ce78ce2f9b8
-
Size
644KB
-
MD5
3b10db3b0967a12da2223f9576518965
-
SHA1
dc447f31234aecdfa2d566ac1d0f928444644fc2
-
SHA256
0c3e2440057bbbccffa8b7cf745aa1ed24e746cb76cb795b5af33ce78ce2f9b8
-
SHA512
a2fe0d27dfe493f1a5ce5e275078d01da0f5613082f9140c59abc34f3e6c6ea04414bf67e16063df593f3c41f91ca3ab47e78201a14ce913ebf3ceb270226f49
-
SSDEEP
12288:5cDa+ylQW2G3/PfNLHH+PW1YpTEvtrbrAWoST:XZ3FbprA6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c3e2440057bbbccffa8b7cf745aa1ed24e746cb76cb795b5af33ce78ce2f9b8
Files
-
0c3e2440057bbbccffa8b7cf745aa1ed24e746cb76cb795b5af33ce78ce2f9b8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 640KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE