Behavioral task
behavioral1
Sample
01ccacf62e50b888ed37f558fadf8fa2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01ccacf62e50b888ed37f558fadf8fa2.exe
Resource
win10v2004-20231215-en
General
-
Target
01ccacf62e50b888ed37f558fadf8fa2
-
Size
48KB
-
MD5
01ccacf62e50b888ed37f558fadf8fa2
-
SHA1
183263a44fa75b0e029bf77ca4c923eb7c300858
-
SHA256
b795d314fa9bee936eb120dced0a429365990c516300730fde25e24afee8d428
-
SHA512
896ef2092b19bb3d94b5ef5fc64b7bb4c3179b2d5c5ccb0b8a78ba3a0f6bb552496333e82087ac696ea799a6d8c7bcbd34dc23caeee6aeccc6d9193d707564b6
-
SSDEEP
768:YAqiRxJtO88L/KfD3zY/C9NPvRXeLQZSKM9ynnfa+F5SpdeDY9R:YAqi3J8LQDtxSQw7wfa+h8R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01ccacf62e50b888ed37f558fadf8fa2
Files
-
01ccacf62e50b888ed37f558fadf8fa2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE