Behavioral task
behavioral1
Sample
0c3992d9947ebdf7cd11dd83facb7c90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c3992d9947ebdf7cd11dd83facb7c90.exe
Resource
win10v2004-20231215-en
General
-
Target
0c3992d9947ebdf7cd11dd83facb7c90
-
Size
45KB
-
MD5
0c3992d9947ebdf7cd11dd83facb7c90
-
SHA1
96b546e46454bc0f8b57bd3a76c5f15c8be4e8bb
-
SHA256
e490c86a01ef5365d142cd0d319dd7e4df65a7f944c703ed70fe4dbc6744660f
-
SHA512
472ee2a4c13e0c22343e1e50cff13e48543934cbfe2622517ae09942cb301ffc6c63139e80b44bf53431ae149dc1efbe86d9533d693732ef82e1b9bb2ec8e434
-
SSDEEP
768:yih4RDK/EKkTR99swLFxNUjvH7CkNxa3wSAjaVmy05qrgqB82oONGCUSjtb:DMnWw2HawSVmyBg11ONPhjtb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c3992d9947ebdf7cd11dd83facb7c90
Files
-
0c3992d9947ebdf7cd11dd83facb7c90.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE