Behavioral task
behavioral1
Sample
0e39b6e902adfbc9dfd7de7271046a2f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e39b6e902adfbc9dfd7de7271046a2f.exe
Resource
win10v2004-20231215-en
General
-
Target
0e39b6e902adfbc9dfd7de7271046a2f
-
Size
169KB
-
MD5
0e39b6e902adfbc9dfd7de7271046a2f
-
SHA1
188a9942c7cd1c6927a19c43addfefd90ad505bc
-
SHA256
25d51bf6ee142ae69687b9efb1df4288321f080b7d21607785c2e67af088ac43
-
SHA512
2cb5cb1fad57ca0d2720a87c39029f6dd2e7951971631138a1c76209780c0f0bb435a1a8e8f8cb9877d27d64022086c443dcbeae5a8ad3894c4ae39468334701
-
SSDEEP
384:TiYilxwBvIriEPb3UUynHBntZzi9tvpLN:TWlxfj3ULnrWfd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e39b6e902adfbc9dfd7de7271046a2f
Files
-
0e39b6e902adfbc9dfd7de7271046a2f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE