Behavioral task
behavioral1
Sample
0d2c0c05ba848aa492ff8737e2697249.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d2c0c05ba848aa492ff8737e2697249.exe
Resource
win10v2004-20231215-en
General
-
Target
0d2c0c05ba848aa492ff8737e2697249
-
Size
363KB
-
MD5
0d2c0c05ba848aa492ff8737e2697249
-
SHA1
e032080519f3b6fdfc5285478ce5f9d781fb775c
-
SHA256
f2e015d8682c520b4f615bad16c49efdf5744d88eb9ffdd702d5e9bdda57a597
-
SHA512
201fc78a97a4001cffbda839ab6bcae2b6c9eb0621a0484997aeda87ae2478a5f30e9ec3f17fcd6e4e141bdb22d67fefdae3ac6bd3e88a9b11ab865fcec47969
-
SSDEEP
6144:hGK1btRcF4iA7umG++JQZOWxsoETi4kdbjFD77HoRqdeKovNySVbaKNkQn8x68uq:h7ZcF1ASxQZNsDilpD2qdlovNtTFWTzv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d2c0c05ba848aa492ff8737e2697249
Files
-
0d2c0c05ba848aa492ff8737e2697249.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE