Behavioral task
behavioral1
Sample
0a12d4e84d357ed3b0b61f16e72b1f45.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a12d4e84d357ed3b0b61f16e72b1f45.exe
Resource
win10v2004-20231215-en
General
-
Target
0a12d4e84d357ed3b0b61f16e72b1f45
-
Size
268KB
-
MD5
0a12d4e84d357ed3b0b61f16e72b1f45
-
SHA1
73c1644238aa8b88fed45d725db17864b45ec893
-
SHA256
d442fba33f9d75103199be1a413e9b50f3c9799e53ef7b4cd7a4c4f7124354a8
-
SHA512
b591967c50fefb54cd444c6f6b227dd3b9770fc45ae42ea0d75c1f92e5ec0203e51443dc7e8a851661519ffa0089563b46dd075d11702a526465c7654bbc6034
-
SSDEEP
3072:LG9QimCRI4rDpVcnmnCFNb+fiC6gsGUAVtPbFd992g0+O8esC847TOAX+6obuWx:KKiDrDb8Uw1Gv4bwCDTOp64
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a12d4e84d357ed3b0b61f16e72b1f45
Files
-
0a12d4e84d357ed3b0b61f16e72b1f45.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE