Behavioral task
behavioral1
Sample
0ba3590d7d9fcde046987f8ae0c90688.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ba3590d7d9fcde046987f8ae0c90688.exe
Resource
win10v2004-20231215-en
General
-
Target
0ba3590d7d9fcde046987f8ae0c90688
-
Size
3.9MB
-
MD5
0ba3590d7d9fcde046987f8ae0c90688
-
SHA1
37797952eb0906c2275d15b4b3fa0f24c3a084e2
-
SHA256
cfa821842fdadccef79cb4aea85534ffcdd22cfca8339d6f87d48a93980dd1da
-
SHA512
da54999051dfeea811bb4d2af15a9dfe98ab3435d6b84fc3d58a096b4ae6b41d8b2f96e6484e93241acfe91e222ce4f31ba73219376cd6745a978c250f198e16
-
SSDEEP
98304:E+Hq80vy92xD2i7D3xkOxYwpKvNpVdbQOD2i7D3xkOxYwpKkRAIwywj92WD2i7DF:YVvNxh7FkNqK5pzh7FkNqKQpSTh7FkNq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba3590d7d9fcde046987f8ae0c90688
Files
-
0ba3590d7d9fcde046987f8ae0c90688.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE