Behavioral task
behavioral1
Sample
0c6498a021ac1c82c83112cff3957b80.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c6498a021ac1c82c83112cff3957b80.exe
Resource
win10v2004-20231215-en
General
-
Target
0c6498a021ac1c82c83112cff3957b80
-
Size
155KB
-
MD5
0c6498a021ac1c82c83112cff3957b80
-
SHA1
c845cb748ca93eecf896a7d984b11768c65e45a7
-
SHA256
dcd1a4e038e73bfaad1e4ccbf5a87b11aa567ffe3ad722de10b0edc9a2761b46
-
SHA512
71a87ce6bfed94a710c3bb9c1c00c33d40cbee0cd440344aa48551468db43e7578e59f849ed4f8937fc4661f90f17ca8a420c91b8fcf41e092118d6616d63277
-
SSDEEP
3072:zTYJBz8fpZBuUCPRq78yyN63BbGxQz/gKHaO7XLwa6EnDBF3hmOukS:vY36pZBsw268EgJGULCnR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c6498a021ac1c82c83112cff3957b80
Files
-
0c6498a021ac1c82c83112cff3957b80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE