Behavioral task
behavioral1
Sample
0fe1e59eb551448621d57f3b9c79e36a.exe
Resource
win7-20231215-en
General
-
Target
0fe1e59eb551448621d57f3b9c79e36a
-
Size
2.3MB
-
MD5
0fe1e59eb551448621d57f3b9c79e36a
-
SHA1
770019db1378d4bb3497c817e9a0c819fd93e102
-
SHA256
c776851b1c693df6c1de7482e8ba6c7537f47bbaacb8a0dd4c54b5d716765f8e
-
SHA512
e783412ac948d64233a15b13f981823798ad3f8f5e4c42e3a8c75a5aa526ff0d191c3065bf5fdad910209b1f2da3c19d5a5dd1516f9d887fb3e2132b5c10c776
-
SSDEEP
49152:d1W/L5W7ujOF/JJY3PzhjvLzSkhbu7X3vt7sAWPB:+/tW7gOF/JJOljzukhbCVPWP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe1e59eb551448621d57f3b9c79e36a
Files
-
0fe1e59eb551448621d57f3b9c79e36a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE