Behavioral task
behavioral1
Sample
0b4f178fc4f74524876f521efe061ca1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b4f178fc4f74524876f521efe061ca1.exe
Resource
win10v2004-20231222-en
General
-
Target
0b4f178fc4f74524876f521efe061ca1
-
Size
10.2MB
-
MD5
0b4f178fc4f74524876f521efe061ca1
-
SHA1
8b802720cd98e6fc4e2898e11ce24d07ff884ff9
-
SHA256
2637c1281666c1dc4ca571b6f6aa16b415e5cabb9e9973b5b2754abd2fd9e286
-
SHA512
ee537a15086e7c3ea2ce7e39a738e71159199f2de323012f75094b84290d5ea60852eb20e55df8aea980aa6de91b303faf7d0cb174a920ac81362292dec90abd
-
SSDEEP
98304:mn53fxDe49n9G32Tgmv3VBGX9DojPdT832Tgmv3:m1xTPEmvGXitEm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b4f178fc4f74524876f521efe061ca1
Files
-
0b4f178fc4f74524876f521efe061ca1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE