Behavioral task
behavioral1
Sample
0c12afa1265b7c9aa2a8652e0961f72b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c12afa1265b7c9aa2a8652e0961f72b.exe
Resource
win10v2004-20231215-en
General
-
Target
0c12afa1265b7c9aa2a8652e0961f72b
-
Size
3.5MB
-
MD5
0c12afa1265b7c9aa2a8652e0961f72b
-
SHA1
77c3f34540f8281984ce00ebd222e58d961b1fdb
-
SHA256
126e559921b13f4a97e5a53e21a97dac3c0a827b27ae994af9e7750b05025001
-
SHA512
f1417355244bca0fcb3e4c160a1a236a16f1ba166a7fe68daa9c6249d8ce93d1eae76d0f9545adf0304aa237cedc4aff00335ac44aefcf05cc6951f5d6b34753
-
SSDEEP
98304:4PgPSTwqWLhekEekJCl9IdOf2FkmjU7DLcNgFwUyUNPlCzJoKsehwsrKgS:LwfJ0l9AGGCPcNgaUzKz6Ksehw8vS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c12afa1265b7c9aa2a8652e0961f72b
Files
-
0c12afa1265b7c9aa2a8652e0961f72b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE