Behavioral task
behavioral1
Sample
0ca6e1e8d09f5954648fc9484199e2c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ca6e1e8d09f5954648fc9484199e2c7.exe
Resource
win10v2004-20231215-en
General
-
Target
0ca6e1e8d09f5954648fc9484199e2c7
-
Size
761KB
-
MD5
0ca6e1e8d09f5954648fc9484199e2c7
-
SHA1
c006b6ecbc984157cedba02340cdd6dfd3bb3646
-
SHA256
7fcc1230e7127055a0d081639a341e5540cc0403d47cd46f5f40a285575a683e
-
SHA512
cd83b954a098b7d2179455f28712d65f68262c49c4ca3d6d4dfa77422bcce53c392c6e0838cb017a4b840414ed1ff2b2d21afb17cf1fd57f25414f9eaa6393be
-
SSDEEP
12288:jt0VPFfsKAkrbPl7cHANUTNhGVHANUNT/:SFksbMGN/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ca6e1e8d09f5954648fc9484199e2c7
Files
-
0ca6e1e8d09f5954648fc9484199e2c7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE