Behavioral task
behavioral1
Sample
0ffb31ebd0d52776535b2a1a152a4d83.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ffb31ebd0d52776535b2a1a152a4d83.exe
Resource
win10v2004-20231215-en
General
-
Target
0ffb31ebd0d52776535b2a1a152a4d83
-
Size
1.5MB
-
MD5
0ffb31ebd0d52776535b2a1a152a4d83
-
SHA1
d4e833b0d1f03cdb4b950c4ba2758eb70c3dee61
-
SHA256
a5824b3f5fed1b8b569e318162bc8c932fa67de50fa44b56b1d5162b88383558
-
SHA512
801be9598e8335646f44f829f47808eefab84645645b93f466073f809a9c8b67410993dca806da25cd4ec99e8d5a1c95cbfa89c33d986bed2e990b7dfe1f6b09
-
SSDEEP
24576:xsdnrypp3f+aHPYuZ/1H5o+ukEAQ8AsPsRkXy33JitxOZcALwJ82sW:xs96lHPv11H5QAQ8As0RkXynJibWcALJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ffb31ebd0d52776535b2a1a152a4d83
Files
-
0ffb31ebd0d52776535b2a1a152a4d83.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE