Behavioral task
behavioral1
Sample
0d7ccbc2085673bea18e9b69a4840a5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d7ccbc2085673bea18e9b69a4840a5d.exe
Resource
win10v2004-20231215-en
General
-
Target
0d7ccbc2085673bea18e9b69a4840a5d
-
Size
3.9MB
-
MD5
0d7ccbc2085673bea18e9b69a4840a5d
-
SHA1
12c4daf4a431649d86a9ec4f8e99d47553fe3b6a
-
SHA256
67ec25d0d049a2d1f6327dba387b7e1390dfab875dc60fd4838d841c6fc7e9b3
-
SHA512
9f2ccba52244ebcc88372c73d89965083ac81e1ef22471c007477887e00199d20751af169f7eaf1aa61dcbbefe7a7fce48364d2c3518509a2e26c326cd26117f
-
SSDEEP
98304:gJdQk+tqFKiogD2i7D3xkOxYwpKRKExw8Dre0GD2i7D3xkOxYwpKf/K0JTNbaUAj:gMk4ZWh7FkNqKweRGh7FkNqKXFJRbRAj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d7ccbc2085673bea18e9b69a4840a5d
Files
-
0d7ccbc2085673bea18e9b69a4840a5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE