Behavioral task
behavioral1
Sample
0ff1ec447897c0dd93674d48efb1d14c0c9e4f0ee7c889249f85e461977077fd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0ff1ec447897c0dd93674d48efb1d14c0c9e4f0ee7c889249f85e461977077fd.exe
Resource
win10v2004-20230915-en
General
-
Target
0ff1ec447897c0dd93674d48efb1d14c0c9e4f0ee7c889249f85e461977077fd
-
Size
2.9MB
-
MD5
2a06cf0b9f1e3dc905e9b63e0c7b2bef
-
SHA1
9c9b6a7229557f4bf235442d280c91824563458a
-
SHA256
0ff1ec447897c0dd93674d48efb1d14c0c9e4f0ee7c889249f85e461977077fd
-
SHA512
ad7f076bf3886810a4188fbc8830d9755ac5724906e395ec30a7caa3b8fa82fc791f876eb46220b51621542f6403529fa3a519a147123e819d080c1805deb5fe
-
SSDEEP
49152:cMX4ZlcR88yd4ZlcR56c7d4ZlcR88yd4ZlcRL:cMX4Lc28yd4Lc/6c7d4Lc28yd4LcV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff1ec447897c0dd93674d48efb1d14c0c9e4f0ee7c889249f85e461977077fd
Files
-
0ff1ec447897c0dd93674d48efb1d14c0c9e4f0ee7c889249f85e461977077fd.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE