Behavioral task
behavioral1
Sample
0c0065a54b59da7121f908f8d0e8dd27.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c0065a54b59da7121f908f8d0e8dd27.exe
Resource
win10v2004-20231222-en
General
-
Target
0c0065a54b59da7121f908f8d0e8dd27
-
Size
2.9MB
-
MD5
0c0065a54b59da7121f908f8d0e8dd27
-
SHA1
18c3c40be57c62e1994c494eb07b7d58fa932c53
-
SHA256
1165037452ee5f6f2077e89f26271bdb52cb568605003bc3919b42c1d690d64b
-
SHA512
e6867e8e79249ed2ab8f47b6c7da2b2a22e0821e7ffd5f91fa3f59fd9c0e10b2645b340c38df24f1e315974c9c2ac45c4bea71763181c400738b4b9eac4b06a8
-
SSDEEP
49152:lzvudgj/vzdQvNs/1HK9z7/GkYWrcLWjI5ty9pdspUgv4aylxwi4NmYRjSR6C3qi:lzvudgjzdWNs/49nQWKWj19pdspU3wiv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c0065a54b59da7121f908f8d0e8dd27
Files
-
0c0065a54b59da7121f908f8d0e8dd27.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE