Behavioral task
behavioral1
Sample
0b789fb493fc7ad7b841f3d0a9c0c9a7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b789fb493fc7ad7b841f3d0a9c0c9a7.exe
Resource
win10v2004-20231215-en
General
-
Target
0b789fb493fc7ad7b841f3d0a9c0c9a7
-
Size
285KB
-
MD5
0b789fb493fc7ad7b841f3d0a9c0c9a7
-
SHA1
d4ad4111b9ca3f0b65393d68d209ca00abff2137
-
SHA256
6ba021e633fb2e9e1da592fdac739b11f33aecd0f2cdf72b15ebc0f66d93f201
-
SHA512
d9e199cff79338e9a1be6aa7053d389812409313e7bba4e91b5572ce2fb0ea6c9f4e7413386de5acd509c9b52e4ecaaafc28550bc5b62b4fb204925fc8d8b0b5
-
SSDEEP
6144:Sa83cGl7bu448PGvLKNzsElVKC04yNH8vRqQ1wC3XUH9:A3Dl7bulLKxsETKC04yNHwwoXUd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b789fb493fc7ad7b841f3d0a9c0c9a7
Files
-
0b789fb493fc7ad7b841f3d0a9c0c9a7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 896KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 412KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE