Behavioral task
behavioral1
Sample
0b3f052b65cd00159961ac5549863a2d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b3f052b65cd00159961ac5549863a2d.exe
Resource
win10v2004-20231215-en
General
-
Target
0b3f052b65cd00159961ac5549863a2d
-
Size
5KB
-
MD5
0b3f052b65cd00159961ac5549863a2d
-
SHA1
c61a96eca2a4ea1e69c6235191d603ce01933f81
-
SHA256
4815d3410fd4b9df627c7640fefd966053bac0314828935b9ac313d3fd810483
-
SHA512
157e0843b40aaee0c4460f25c129ce6f456edf718f467c41ec8ad569873502dcd8423f66e61b9d072e31310923703d863dc8ad25a45a1891409fa16078ef0cc8
-
SSDEEP
96:kNliXfDhl6M3iL36Mi2+ug3QRa9j1WXa9sM+rXK32ZO5VURQM+1Z:4iXfDhl6MyLKN2+73qEsBrXK32ZjRQM8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b3f052b65cd00159961ac5549863a2d
Files
-
0b3f052b65cd00159961ac5549863a2d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE