Behavioral task
behavioral1
Sample
0c32f12dd630264c6598440a6e675bc2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c32f12dd630264c6598440a6e675bc2.exe
Resource
win10v2004-20231215-en
General
-
Target
0c32f12dd630264c6598440a6e675bc2
-
Size
1.3MB
-
MD5
0c32f12dd630264c6598440a6e675bc2
-
SHA1
9463de712076a8c8d107c82df6abc7bdf0350951
-
SHA256
ab08007b151dbb84e617d38d8cfcf6a8b08a3259e9cabd47b4c1955d9e84c701
-
SHA512
f91caf19aaf16dc5a30e2a04ebfc91a1ce6c4118ec2f2be0a2a50f84606938a8479caf2266d3fc37e2fb06248249b3710198688132c767b4ca8cba6da59fdce9
-
SSDEEP
24576:p95ooKw0UYoVJ5jbUVlAUGwNbwPWnuCXnw8I6TvvtBJ+d9pu80roJvKeSWta3t4Y:PWoKw0UYiJ5jbo5GqbwPWnuCXnbRTHtd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c32f12dd630264c6598440a6e675bc2
Files
-
0c32f12dd630264c6598440a6e675bc2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zmd Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE