Behavioral task
behavioral1
Sample
00fdbb273e0baf9f69400460a7292e23.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00fdbb273e0baf9f69400460a7292e23.exe
Resource
win10v2004-20231215-en
General
-
Target
00fdbb273e0baf9f69400460a7292e23
-
Size
111KB
-
MD5
00fdbb273e0baf9f69400460a7292e23
-
SHA1
a23697dd8e972d61607e406d40c21ee7d0b04c2c
-
SHA256
aad89a04c6cff107c4f55a5ef71432730b0dc8e7c0926e42e9bbab58c5e7cd30
-
SHA512
c28d7708212c4cdcdd37d164b19b1170f406b6275dde62ab78041ab63bf92099ba93ffe61131ff3596513228ea2613803e6b8c811935dec725faa483fa2b2754
-
SSDEEP
1536:aQqVTIQqhsJaX/FkPW5oj0Rq7hQCV0JyCXR6mKRV6wc7fTya3Od+dNOH0d+Kssx:aQqVTIQavFoKBRm+CVwomq9a3K+rOs3x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00fdbb273e0baf9f69400460a7292e23
Files
-
00fdbb273e0baf9f69400460a7292e23.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE