Behavioral task
behavioral1
Sample
0080fe97898ec1638b7fa2f2cb23a60a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0080fe97898ec1638b7fa2f2cb23a60a.exe
Resource
win10v2004-20231222-en
General
-
Target
0080fe97898ec1638b7fa2f2cb23a60a
-
Size
1.1MB
-
MD5
0080fe97898ec1638b7fa2f2cb23a60a
-
SHA1
e75c31d12006d1b9792310260e29862457b9a210
-
SHA256
25eb5aac9df7677a7cf7763213598e92d9e2a5866a101b2928345f3e40107a3d
-
SHA512
7588ea4c5edf098dcf347bb2a320f2bb15ad44a2ee66a4ce04dfdebd8d2def7ac9ddf9a0974f2718a1b94089204fdf34b2c5f8f90026ae29d389cc26d6c7ca8a
-
SSDEEP
24576:hQD0gMqawMVaB4eN/FaHzMHKzocpAU4PHm92oO0cK:hQD0bqzOzMqiUMm92vK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0080fe97898ec1638b7fa2f2cb23a60a
Files
-
0080fe97898ec1638b7fa2f2cb23a60a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE