Behavioral task
behavioral1
Sample
0b2e51804d649b951db50fd584693881.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b2e51804d649b951db50fd584693881.exe
Resource
win10v2004-20231215-en
General
-
Target
0b2e51804d649b951db50fd584693881
-
Size
2.6MB
-
MD5
0b2e51804d649b951db50fd584693881
-
SHA1
e8192c248c459a98597c268e09c2a28b110aa1cb
-
SHA256
46c3b1ff3c757691982492983c388631773908007bd396d7e1547655269419b0
-
SHA512
b26bed19baac35356cca61e1c6c0115ac690cf330953bc804248421710989096474ae0fbe2bc5acc890a724ffb7435255b9af2226b68e19eb646ce4f4085cb71
-
SSDEEP
49152:tWRfBfDMRVXCXsA2zG+9btSSbIJqZsgQ3YNcO/X72ay3:sfDqPfSPUZQ6W3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2e51804d649b951db50fd584693881
Files
-
0b2e51804d649b951db50fd584693881.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE