Behavioral task
behavioral1
Sample
0d3335954da589c4fefdf544f6696fcf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d3335954da589c4fefdf544f6696fcf.exe
Resource
win10v2004-20231215-en
General
-
Target
0d3335954da589c4fefdf544f6696fcf
-
Size
24KB
-
MD5
0d3335954da589c4fefdf544f6696fcf
-
SHA1
cbd67db5092407a32457a2f8cd17ef51f1908849
-
SHA256
8fc81c6c9414346256d2d4edce75f653061b438e2c068bef3c8153ea4e5eb0ff
-
SHA512
c1125f47fc9c4268acca3e6e7f3574647b6f13e92cd5f4d1794e10f0ac45597c4378a374185796ad43b45aa5e13e4f1c518ae3fd220fa3a1a39c1e5236ccd63a
-
SSDEEP
384:fhnCuMobu3bNJTSdEHnIVhnmZ+1fvPsxgd9r+lffQlZxFSHOiS:dn0JeEnKmZ+9Hsxa+lffQlTFSu/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d3335954da589c4fefdf544f6696fcf
Files
-
0d3335954da589c4fefdf544f6696fcf.exe windows:1 windows x86 arch:x86
0080b3585487b9e77cca10e4810a8802
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
user32
CreateIcon
CreateIconFromResourceEx
Sections
.idata Size: 512B - Virtual size: 178B
IMAGE_SCN_MEM_READ
.code Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE