Behavioral task
behavioral1
Sample
0bf04bd051bc0d51164b6d581380ddd0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bf04bd051bc0d51164b6d581380ddd0.exe
Resource
win10v2004-20231215-en
General
-
Target
0bf04bd051bc0d51164b6d581380ddd0
-
Size
72KB
-
MD5
0bf04bd051bc0d51164b6d581380ddd0
-
SHA1
2f094485071e7ad5ae9c1958cd15e646649b3b0e
-
SHA256
c65d72a2a262b687d2c7993376fe5d253f69323b116f810d512d2b3cffd902fa
-
SHA512
718b28ecd5147acf5df86de9b6154c89e14b2f99aef7c05bb71a4f5b69dd66d662a1a950c91851aa89913d3318b7c36df35df00a95826ae6ab1f9d47549614f9
-
SSDEEP
768:6js4CkF+odwnsYG4CGmAKaULnO0FygwARrFjFCAvGW5I:Es4CkFsnVBC9dbNQ5ARrF42VI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bf04bd051bc0d51164b6d581380ddd0
Files
-
0bf04bd051bc0d51164b6d581380ddd0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lif Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE