Behavioral task
behavioral1
Sample
0ea87931ebe532d34bebb81fb5da6f08.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ea87931ebe532d34bebb81fb5da6f08.exe
Resource
win10v2004-20231215-en
General
-
Target
0ea87931ebe532d34bebb81fb5da6f08
-
Size
1.6MB
-
MD5
0ea87931ebe532d34bebb81fb5da6f08
-
SHA1
b6319fc7ced87b157b5c69cb52d6d385023072fe
-
SHA256
093dacf5643655f08d2c3b3ff121f6d33646563c700d966ef037f4f267d852fb
-
SHA512
eb7987cb3ace2251cfb1ab61dbc9bf3d45ba523ddf71eee265c42e6b28fad96d8edf9729d37566c74dd4c2ac33c2882f316d455a56224a298c18bb6a81e05bdc
-
SSDEEP
24576:jj9Lw63ct04QFzYTjo5BpYooZuvgUx49vITeqTiY:jj9LxcO4Q5YTjOTORITeqTiY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea87931ebe532d34bebb81fb5da6f08
Files
-
0ea87931ebe532d34bebb81fb5da6f08.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE