Behavioral task
behavioral1
Sample
02bfb75a610f7d9510a63e2522faaf3a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02bfb75a610f7d9510a63e2522faaf3a.exe
Resource
win10v2004-20231215-en
General
-
Target
02bfb75a610f7d9510a63e2522faaf3a
-
Size
31KB
-
MD5
02bfb75a610f7d9510a63e2522faaf3a
-
SHA1
76c645df9f0ea5d6181a398faa8dda053e51b620
-
SHA256
e2e4e412d69c089f376e8bcdfb5c51d2080b096f6f690abe17ec541702b65a10
-
SHA512
666afab6ebd077359e5c24ac4f7d810b48e2673feca23204662bbff75d7936324c0f705ba5730c5319616996c0ef74e3808df50c2a06a3e4f3e44bb3b2e90208
-
SSDEEP
768:slZ4mfcRFPnVdqr/gzqWR+rbi6DWH3TdWGq3oYG:KnQFPn7qr/gupD23Tdvq7G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02bfb75a610f7d9510a63e2522faaf3a
Files
-
02bfb75a610f7d9510a63e2522faaf3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 531KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE