Behavioral task
behavioral1
Sample
0bfc701964c321cc9498fa9199da72d8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bfc701964c321cc9498fa9199da72d8.exe
Resource
win10v2004-20231215-en
General
-
Target
0bfc701964c321cc9498fa9199da72d8
-
Size
77KB
-
MD5
0bfc701964c321cc9498fa9199da72d8
-
SHA1
a8168dcb077d7924111255d7c6bc4739c6d83d9c
-
SHA256
45cd892f420bb625cab23d5c9091a3ff6db717ff4e2d9f81eee6409a26c2b66c
-
SHA512
2da9344fc37499d911659c06d5f711ce95b75500ee1c28b53d05f3ba79bead4d63cda464e99018a3ec5e39f47178d0d63709421afdc87e4d7ae11c909a6c8360
-
SSDEEP
1536:BXJAZc0V65UgAJMX7hnAPUYmkjsQCvJOC:0ZcGEKMrhkmkjsQCvv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bfc701964c321cc9498fa9199da72d8
Files
-
0bfc701964c321cc9498fa9199da72d8.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE