Behavioral task
behavioral1
Sample
0ae772b66eeb32871a2bba23ecc3cbdb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ae772b66eeb32871a2bba23ecc3cbdb.exe
Resource
win10v2004-20231215-en
General
-
Target
0ae772b66eeb32871a2bba23ecc3cbdb
-
Size
4.8MB
-
MD5
0ae772b66eeb32871a2bba23ecc3cbdb
-
SHA1
909b0b371e27f40b112ca29a410a78522e889b66
-
SHA256
07f689e8079114902e53a62c92646edd3eae0bc1b5a75506d4e35f504424c371
-
SHA512
c5a8c007cb7fbb6cbb95f3d1d49ec18f3d577d382d202abe0134e602355775c8b184302b6a7058b73a7b6a147f934369fbf58b8752343315a44e2053fd824691
-
SSDEEP
98304:SPLJ/gPKR39Xgg3gnl/IVUs1jTndIWyViZDsKligg3gnl/IVUs1jr:SPN/gPi9Vgl/iBHnuttKkgl/iBP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae772b66eeb32871a2bba23ecc3cbdb
Files
-
0ae772b66eeb32871a2bba23ecc3cbdb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE