Behavioral task
behavioral1
Sample
093ab5a596142fdb0de8551389d2e9fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
093ab5a596142fdb0de8551389d2e9fe.exe
Resource
win10v2004-20231215-en
General
-
Target
093ab5a596142fdb0de8551389d2e9fe
-
Size
56KB
-
MD5
093ab5a596142fdb0de8551389d2e9fe
-
SHA1
1e727eafeb1b997eb495fb263cde993a3eaad35f
-
SHA256
83b11e0a71fcb58697d6df0494d4a09d801a3859e73e1ad336180a9993ad878a
-
SHA512
b67620a6b7ec17d2fd93cf933def6998f35cb680057bbdbc419eb669b4a610d765d2df827f8b0ff795bee97b48e186cd3fd5d4ae946bab0af50ff924b5cc11a0
-
SSDEEP
1536:eUQYwOSttRK26BKGFYH2G4WdV2qN+jWMqWnbjrvlH84cn0A4cU+:eUa+KGFYHZuNpH8P34c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 093ab5a596142fdb0de8551389d2e9fe
Files
-
093ab5a596142fdb0de8551389d2e9fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE