Behavioral task
behavioral1
Sample
0cc108cdf4d17d8247dcc896a86fc7fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cc108cdf4d17d8247dcc896a86fc7fc.exe
Resource
win10v2004-20231215-en
General
-
Target
0cc108cdf4d17d8247dcc896a86fc7fc
-
Size
5.6MB
-
MD5
0cc108cdf4d17d8247dcc896a86fc7fc
-
SHA1
74a5e9b5b5369f11101d81edbe429982e29806a3
-
SHA256
7b9a698059e570c9c2da0f02a7a99c0f7377ea9aeb37626114d4658a2ddab7b4
-
SHA512
88746fe71ffd3c6088eee98a3f791c68a2fb59f2e95b40da699e7f338d4d01f6a85bfa16e4129aa329230697fc0724ba61d31a39848a9b7842d1d877bd660ded
-
SSDEEP
49152:dR8Oc3PtucRUWREZa30g4yBXHvm/fiGI4Y+bzEoUXIbhhhgRa8ZLsiv:dR8f3z7q4l4UXPmNbXeinhSdsy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc108cdf4d17d8247dcc896a86fc7fc
Files
-
0cc108cdf4d17d8247dcc896a86fc7fc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE