Behavioral task
behavioral1
Sample
0d38fcd71547014804976e65167c3fa7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d38fcd71547014804976e65167c3fa7.exe
Resource
win10v2004-20231222-en
General
-
Target
0d38fcd71547014804976e65167c3fa7
-
Size
2.9MB
-
MD5
0d38fcd71547014804976e65167c3fa7
-
SHA1
f7c5d0029d91ee0660dbf6cedb56c2379b64978e
-
SHA256
2181b25a0f248f4b53bcdf941af00e012571b9406fb081de1856d13e4810b1e3
-
SHA512
324a78524047b037e6caf354f40b964508a325ec6355360db11386e42c4839667a72e523617380aa85109851d2fb7a5433ffdc9a94930389f57cce9c21a19b9b
-
SSDEEP
49152:kEQ7xHdJbrtgQn6AWdlIfFAbhROP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:kEsjxgQn6AWyEegg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d38fcd71547014804976e65167c3fa7
Files
-
0d38fcd71547014804976e65167c3fa7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE