Behavioral task
behavioral1
Sample
0253c4cf4d31eccb1037bbb5a2608cbd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0253c4cf4d31eccb1037bbb5a2608cbd.exe
Resource
win10v2004-20231215-en
General
-
Target
0253c4cf4d31eccb1037bbb5a2608cbd
-
Size
368KB
-
MD5
0253c4cf4d31eccb1037bbb5a2608cbd
-
SHA1
c94560ceb80bb87d8aab40aa89dd45a958c73716
-
SHA256
6421c442ce633fd4a44951ba3a45bce5104b7a2cd3d031d44070893708cf4f62
-
SHA512
6a2852cd58b8f3a76198d18e997821fd895c0bdfee5ca54343d2ee9ad37902f02dc2320cc3c9a87321ef32af9cead364e7051181514ec1d2c2776bde10a1a246
-
SSDEEP
6144:SUSiZTK40wbaqE7Al8jk2jcbaqE7Al8jk2jy:SUvRK4j1CVc1CVy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0253c4cf4d31eccb1037bbb5a2608cbd
Files
-
0253c4cf4d31eccb1037bbb5a2608cbd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE