Behavioral task
behavioral1
Sample
f0b8cebec1f6ff43e29966a3bc720cc323dd1b431d44f00d727697a14c73ff0a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f0b8cebec1f6ff43e29966a3bc720cc323dd1b431d44f00d727697a14c73ff0a.exe
Resource
win10v2004-20231020-en
General
-
Target
f0b8cebec1f6ff43e29966a3bc720cc323dd1b431d44f00d727697a14c73ff0a
-
Size
1.5MB
-
MD5
9ce7d4c1bd710ec56aeab62272f0bc4e
-
SHA1
575d7aec5d2f6c349c9dadca8c443256dced5641
-
SHA256
f0b8cebec1f6ff43e29966a3bc720cc323dd1b431d44f00d727697a14c73ff0a
-
SHA512
b03439bcb24d5f2803a1693fe72b59fd59345787eba385ebeb8c1cf7b4f418ad203b6ce22dcd5dbed15829d689e606e5719954f653889ff90ec808204f57d126
-
SSDEEP
24576:hnTMv7Mlsb/xHQ2aIDQ059vGFMWVO6RjaXNxvKa5OK5J7UBZavRt0qWrg2r2R:Fu7Ml2xRjDZDWVOrLvIKjAPMRTh2yR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b8cebec1f6ff43e29966a3bc720cc323dd1b431d44f00d727697a14c73ff0a
Files
-
f0b8cebec1f6ff43e29966a3bc720cc323dd1b431d44f00d727697a14c73ff0a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE