Behavioral task
behavioral1
Sample
0dd9b7e82dc330e503ca305f64fad132.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dd9b7e82dc330e503ca305f64fad132.exe
Resource
win10v2004-20231215-en
General
-
Target
0dd9b7e82dc330e503ca305f64fad132
-
Size
460KB
-
MD5
0dd9b7e82dc330e503ca305f64fad132
-
SHA1
9fd791cd86301f4ee5dc874dd6eae7f16abcb2d8
-
SHA256
d7206027421c52b66156461ca24d05e0bf80e97eec9282662a328c6e9c0688e9
-
SHA512
f9c57b70039023cb9df8e780933b7a82ca422eca4960f8bd83c8665a2da6e8af50e00fe6a42d9ad3a776436085d922163d50628ed8b4ae8d7f649745770a0b16
-
SSDEEP
12288:38w1eF/qie8EDXN+uhANUiexGqGN3LimTov:s8qlJErN+uhGMlGN3Fov
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd9b7e82dc330e503ca305f64fad132
Files
-
0dd9b7e82dc330e503ca305f64fad132.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 442KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE