Behavioral task
behavioral1
Sample
02b6d49ae76477be4a25b85c496248d0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02b6d49ae76477be4a25b85c496248d0.exe
Resource
win10v2004-20231215-en
General
-
Target
02b6d49ae76477be4a25b85c496248d0
-
Size
133KB
-
MD5
02b6d49ae76477be4a25b85c496248d0
-
SHA1
eddfe68734771cb1b6c70273598adcac569aa6df
-
SHA256
22fd73b73371823a60492547451c92bf2a8ec308db27ff085f0c5179f99aec58
-
SHA512
17d80cba13f540d6bde50322b0c189fdc183dcc47cd9acdc8728ccadb377d7387704998a3087c10339991294fd7c5fe5ab4b0c7d9d2303d31a2453b4abaa5b6c
-
SSDEEP
3072:TulH8dbxMFGakwlUBrBTuwB6S4HO5D3MPNzGxDcfCNl0IU28t3eHYjQ:Cl+xM4aUBrBuwB6Sys4NS6S05BQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02b6d49ae76477be4a25b85c496248d0
Files
-
02b6d49ae76477be4a25b85c496248d0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE