Behavioral task
behavioral1
Sample
0cfab97657af6f6ba9b7207553ad155f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cfab97657af6f6ba9b7207553ad155f.exe
Resource
win10v2004-20231215-en
General
-
Target
0cfab97657af6f6ba9b7207553ad155f
-
Size
133KB
-
MD5
0cfab97657af6f6ba9b7207553ad155f
-
SHA1
2bc3fe89d464e900dc68a6fc3ba5a2f1cfb9db35
-
SHA256
7dc433a6428a5f81dbf55b73ed3fced1ea26549ac164ec1e273af0610d044810
-
SHA512
98c002abc40f34a0919cceefbd659127ddf5d6c660e8c6a88ed8baf6044f970e862cdf7b485c4da8d8b5d6625af12280ac61ad454a8e7e9fb26370855fc260ff
-
SSDEEP
3072:rs11b5KNCPXduNPaFw1enW7Ggvod3F+S1SWfs/zF4CmrSl:g1b53XdKP4+lwd3F+Sa/WCcSl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cfab97657af6f6ba9b7207553ad155f
Files
-
0cfab97657af6f6ba9b7207553ad155f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE