Behavioral task
behavioral1
Sample
02ef60cba67e402f64489a863f3fb04f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02ef60cba67e402f64489a863f3fb04f.exe
Resource
win10v2004-20231222-en
General
-
Target
02ef60cba67e402f64489a863f3fb04f
-
Size
2.7MB
-
MD5
02ef60cba67e402f64489a863f3fb04f
-
SHA1
c74fcba8288a0e06bec966ac92fb0538d3967c8c
-
SHA256
95ed4d8aa431e94bedd3f964b4cf1d005037a7e2080f9917c0547813c60228c5
-
SHA512
3bdd5495a07e27f412905e11959384e1513efea36b770b9deac0697612de0400df49dbc02035f4a0e03d7fedbac3f4ce0200d110ab8e373e4c0cb055c773ef3b
-
SSDEEP
49152:JWkb5BM14/9aE+8H/UxcVNs+aHwIb24Lod6PAPU8w8QWxsuaOp:n3MS/BHcOVNTySNOAtfza3Op
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02ef60cba67e402f64489a863f3fb04f
Files
-
02ef60cba67e402f64489a863f3fb04f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE