Behavioral task
behavioral1
Sample
0b72925a88a144c4f23e9dcb2222358d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b72925a88a144c4f23e9dcb2222358d.exe
Resource
win10v2004-20231215-en
General
-
Target
0b72925a88a144c4f23e9dcb2222358d
-
Size
133KB
-
MD5
0b72925a88a144c4f23e9dcb2222358d
-
SHA1
3818b7df921d828105759343cb26324b3d6dcf1c
-
SHA256
b8dc19a32899a12fa1fa0bcef05d8817e99b126c3738f8d7b59b21b253b3ccb7
-
SHA512
d97bb7a551a96add6d56f7b6207788a59d5bd26cbc22c3a178f05c778c4e5f49758ebe19ca7a35d3b0b97f8719648f06a5bd11864c619d47a9b850b51681cc07
-
SSDEEP
3072:Ld2nYW/PWpOPtYJGUDBUE3+j85EgRwz09Q:J2n7yn209Rwz09Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b72925a88a144c4f23e9dcb2222358d
Files
-
0b72925a88a144c4f23e9dcb2222358d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE