Behavioral task
behavioral1
Sample
0266e40127dcd77e2e0b685591de8a39.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0266e40127dcd77e2e0b685591de8a39.exe
Resource
win10v2004-20231215-en
General
-
Target
0266e40127dcd77e2e0b685591de8a39
-
Size
133KB
-
MD5
0266e40127dcd77e2e0b685591de8a39
-
SHA1
dffba004c903c70dbcd04495c8f8d3d066e2be6e
-
SHA256
1805d08f95681288e9939988d2ef7fd3ce196cbdd034cacf469ba392bc2032dc
-
SHA512
b305b58c446ed9ecab17eeb094695da6781f38c55f8712909a5a2ce53a1f7a330e53a8f228a64c07144b535f9423fd258eff55f6703ded21b35d91bd01d5caf8
-
SSDEEP
3072:VVqTPvAzYEbdMrYkHauz18jMM5O8p0R6pEwIrax0XyBU8tKezTdaQ:DOXcY9rrHH8jM+f0obIr1iN/ndaQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0266e40127dcd77e2e0b685591de8a39
Files
-
0266e40127dcd77e2e0b685591de8a39.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE