Behavioral task
behavioral1
Sample
0c0935e8c7a6b33dc5c1e4e41155b681.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c0935e8c7a6b33dc5c1e4e41155b681.exe
Resource
win10v2004-20231215-en
General
-
Target
0c0935e8c7a6b33dc5c1e4e41155b681
-
Size
75KB
-
MD5
0c0935e8c7a6b33dc5c1e4e41155b681
-
SHA1
2eba8d1fdacf5b79ac44aca2fbef07de0cc0e41e
-
SHA256
46e45d0e5194296014a639756f25e4c606d62e32b66f5b11873ed0d725c36ee2
-
SHA512
7834e5754812f189e432c28dea95ee792987fdacc6e28503fd48abfae75abb918b2efa35a6eb05706da87a6dcde51ecc6a248df60ac79e84002f737466b055b6
-
SSDEEP
1536:A2mtRJuAQLUv0HgHLBwAEZJEUjz/lJAlEKmery7C:5FA6LDAEZaslJiHm/C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c0935e8c7a6b33dc5c1e4e41155b681
Files
-
0c0935e8c7a6b33dc5c1e4e41155b681.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE