Behavioral task
behavioral1
Sample
01ffc9d59ca7da9958edd6d7b1068765.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01ffc9d59ca7da9958edd6d7b1068765.exe
Resource
win10v2004-20231215-en
General
-
Target
01ffc9d59ca7da9958edd6d7b1068765
-
Size
59KB
-
MD5
01ffc9d59ca7da9958edd6d7b1068765
-
SHA1
63247500e68c2722d8588e546b385664eb1c4c66
-
SHA256
71a5979cbb182c59a442def51d2fcea342694e1ad77d21139d13d2db35f32edd
-
SHA512
563d8f0537f65ece1d1d0ac27992117c4d27aa65b0369abab4840483e94c1222619e3c9be4aaf9a2571ac79c9243af109250ca316d5b02abd0b5265122e4b985
-
SSDEEP
768:IfWMeRS2Vod2+DNMrjD9u1cyTWjHz8wM7PRi1A1Z4I2s8XOrAEVsVEm+PWwfpedE:hY4od2gSrX9uFqQwah8XOrnFPxh/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01ffc9d59ca7da9958edd6d7b1068765
Files
-
01ffc9d59ca7da9958edd6d7b1068765.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE