Behavioral task
behavioral1
Sample
02db3ed1970f21f866040a2fdfa557cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02db3ed1970f21f866040a2fdfa557cc.exe
Resource
win10v2004-20231215-en
General
-
Target
02db3ed1970f21f866040a2fdfa557cc
-
Size
1003KB
-
MD5
02db3ed1970f21f866040a2fdfa557cc
-
SHA1
afdfe764cc1475949cfe07c5b176fc5c698aa91a
-
SHA256
3199bfab8cb285fae6e024603f0c94303d471e257ef195ed5c272f9803ee5079
-
SHA512
c49f4fa0b0ef2058453d46f6387a6d2e5034d27959e2c7e5afb1dfd0f7a6cfb70da57bb792255d1d082b8e1407b9fce01c452011ffc2023a287ca0a9a5278e6a
-
SSDEEP
24576:Vyd81QAMpavZCD547bGQoadai7D3uITjIFOxo53ApIj:VydWdMpavgD54fGQ7ai7D3xTgOxYwpK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02db3ed1970f21f866040a2fdfa557cc
Files
-
02db3ed1970f21f866040a2fdfa557cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE