Behavioral task
behavioral1
Sample
0b8d5cf67c027641b54ef8d97367df24.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b8d5cf67c027641b54ef8d97367df24.exe
Resource
win10v2004-20231215-en
General
-
Target
0b8d5cf67c027641b54ef8d97367df24
-
Size
94KB
-
MD5
0b8d5cf67c027641b54ef8d97367df24
-
SHA1
bc7c2084ff7b81143a3ab8207647535602b263af
-
SHA256
dcb25a2b2ec5a7c864147f2edb06b930e58dc88e5903711a8ac76ba349fea075
-
SHA512
e564486ceaf3470b635d4a0eba5862fd2b265336b83db6fab092784506a073f60daa30ffb6daf63d47103951a227f34f0c2e874fe9a74441863dbf2026cc6ca9
-
SSDEEP
1536:0+e6VCyzJcw/Tn4DTPkM/umMepdzsry1ohP7vAc3lvteZQEe0mu:m6V1tcknhGpdzK1YcEcg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b8d5cf67c027641b54ef8d97367df24
Files
-
0b8d5cf67c027641b54ef8d97367df24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE