Behavioral task
behavioral1
Sample
06ba3e0a8cbc1e88bdc994810bc0d405.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06ba3e0a8cbc1e88bdc994810bc0d405.exe
Resource
win10v2004-20231222-en
General
-
Target
06ba3e0a8cbc1e88bdc994810bc0d405
-
Size
59KB
-
MD5
06ba3e0a8cbc1e88bdc994810bc0d405
-
SHA1
b2ff091452fd256f8d4a80d6f08910f00ed0a0f1
-
SHA256
8917ce3cc958f9b35f43c4cdd2802f5e09f90e02c0620546df03345b8b312ed9
-
SHA512
0dce4e89e3a6e7c9ade8a2499fb9bf1f8e81f2ad2d0451858eb1e1261b53754fb5609bbb07bdcad5689c52b67cf21d1542ecbaab2c488cf5307d3b9c30fc18f0
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z39:SKcR4mjD9r823FHKcR4mjD9r823Fc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06ba3e0a8cbc1e88bdc994810bc0d405
Files
-
06ba3e0a8cbc1e88bdc994810bc0d405.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE