Behavioral task
behavioral1
Sample
0fe341506e3c0f75456b97235729aacb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0fe341506e3c0f75456b97235729aacb.exe
Resource
win10v2004-20231215-en
General
-
Target
0fe341506e3c0f75456b97235729aacb
-
Size
198KB
-
MD5
0fe341506e3c0f75456b97235729aacb
-
SHA1
5f48dab76848b34a21ca3d38944ab73c7acfae44
-
SHA256
843db5b161a7dbe0a9e78e4dda509cafb3fc3b15bd00ed0c1dfaec306db2c9bd
-
SHA512
d530b542a28f7a4ab9477191c10cdfe797175f8e39bc4e3f45f7f5015184c0f46aa9d4913ed3ef7fc62e0e5109636950ba6acb7d4bc25dafd97e541073f2074b
-
SSDEEP
6144:FjBTTBanX3AAgjqTbYADboM6Sp9w22HROoC:FjBh0ANqnbbES022xfC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe341506e3c0f75456b97235729aacb
Files
-
0fe341506e3c0f75456b97235729aacb.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dzjm6zal Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s6skaxa. Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dpdqr77y Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ