Behavioral task
behavioral1
Sample
0ec474dc47417fd1c9726587d78947f0.exe
Resource
win7-20231023-en
General
-
Target
0ec474dc47417fd1c9726587d78947f0.exe
-
Size
205KB
-
MD5
0ec474dc47417fd1c9726587d78947f0
-
SHA1
84719615149ab4b1af297bb3f23caa33d81cdeaa
-
SHA256
63a3a1be31c96a12bfed95e7b217a88f4295e073873c1f1cf1e0fb52324bd639
-
SHA512
3cc7d17fce2eceb8f780e9fa53b9ff58bfa30a8a3a88e50cdc854815c134f82ad259b42e87763482cb7ad4d061472f9ccd181cffdf6ced959dafa043bc8f730a
-
SSDEEP
6144:9cm4FmowdHoSyAszBd+za/p1slTjZXvEQo9dfa:/4wFHoSy1zBR/pMT9XvEhdfa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec474dc47417fd1c9726587d78947f0.exe
Files
-
0ec474dc47417fd1c9726587d78947f0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE