Behavioral task
behavioral1
Sample
08595faa55c7e0b24a1aecd2832f3006.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08595faa55c7e0b24a1aecd2832f3006.exe
Resource
win10v2004-20231215-en
General
-
Target
08595faa55c7e0b24a1aecd2832f3006
-
Size
52KB
-
MD5
08595faa55c7e0b24a1aecd2832f3006
-
SHA1
8b4dc3af12dd7ec9ab925ad6f517ecfad93a0254
-
SHA256
f3e4684cd563ce20069355c8f787f87d0988fe511a3e936b17a586b909141c13
-
SHA512
1a25b31c63e5e3c4488d0588dddaf497f1193f36653224b3b684285744ee4732e337639aa8c7ed8e55ff526fa9051faea0eac210465cfe77cd1a8440c9beeb84
-
SSDEEP
1536:zwWvbw/csofasxTVCP/gDq+rxRi/jCiwJ41:bDocRfdTVG/kqOC7Z1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08595faa55c7e0b24a1aecd2832f3006
Files
-
08595faa55c7e0b24a1aecd2832f3006.exe windows:1 windows x86 arch:x86
2a00a2d9d2c14a9482812c3fcb274f41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CombineRgn
comctl32
InitCommonControls
kernel32
EraseTape
user32
ChangeMenuA
msvcrt
strcpy
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE