Behavioral task
behavioral1
Sample
0aa209006d8a5356f9cd1a6915707964.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0aa209006d8a5356f9cd1a6915707964.exe
Resource
win10v2004-20231215-en
General
-
Target
0aa209006d8a5356f9cd1a6915707964
-
Size
1.8MB
-
MD5
0aa209006d8a5356f9cd1a6915707964
-
SHA1
471967e7b494f90ec6e6bac3843846834a83737e
-
SHA256
d52ae2b2cef4478f17e54ecd52c5b526adf4016c25f3ce40f5a160d9ff586ab0
-
SHA512
536d5b718e36d270910a13ff43cfcb151611ed7dc5d7172d9d7090a29ed139bfc647c404a05c88673d5a0f778076f53c36921a55554084ff83dfa02cc9d3c22b
-
SSDEEP
49152:Jq3i+pnXEE1xrSSqqniOd0tGN+1HDcCX+M7:Jq3PZEEv/qqbqv1HDcCX+w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aa209006d8a5356f9cd1a6915707964
Files
-
0aa209006d8a5356f9cd1a6915707964.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE