Behavioral task
behavioral1
Sample
0b24b924145e994d7c34491b5e4d7c60.exe
Resource
win7-20231129-en
General
-
Target
0b24b924145e994d7c34491b5e4d7c60
-
Size
5.8MB
-
MD5
0b24b924145e994d7c34491b5e4d7c60
-
SHA1
df5ced20da7ccf57204a931cd8d204ff0d9be47e
-
SHA256
2d91e2aa66425fcdaa821d0a5934044b7f61c0a662b57e3633c20a284093350b
-
SHA512
b3b0c3dcd0f80fd8bd9b247dfcc63db5ebc3a42f7141b0d81be55a4215c45117b26f51a68b9310db984a05fd559827f5493794e31e0ad0a3a288e2aeed57666d
-
SSDEEP
98304:XnGczAL4p0qTaN4gg3gnl/IVUs1jePsgi2OwLUl5PHNCqQmRgg3gnl/IVUs1jePs:3GlL4pLgl/iBiPQiLUDPH4/mHgl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b24b924145e994d7c34491b5e4d7c60
Files
-
0b24b924145e994d7c34491b5e4d7c60.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE