Behavioral task
behavioral1
Sample
0ffc4160e084409cbf6c8f7e03e72326.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ffc4160e084409cbf6c8f7e03e72326.exe
Resource
win10v2004-20231215-en
General
-
Target
0ffc4160e084409cbf6c8f7e03e72326
-
Size
10.0MB
-
MD5
0ffc4160e084409cbf6c8f7e03e72326
-
SHA1
8c8c8ab81f2988f7534df6d4debc345f8ea512ba
-
SHA256
ca6ab61ad343bed1496c1386a81bb627860b74133c6a0bebca1d587cc6e2ba4c
-
SHA512
dc19e1eac60af864658e1a9647eef952cb91cfeeb4e13cd23b405a1bf348173a6cab2b33078279ecf7526af35c1eab1a92b714fd7df42dcc6e9f80bc710c3016
-
SSDEEP
98304:wXF8D+srwOj0+8HsIVfW5t5DsMR2FKWwd15WmZj0+8HsIVfW5t5D:F+srwOj0+UVfUHnRBWyJj0+UVfUH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ffc4160e084409cbf6c8f7e03e72326
Files
-
0ffc4160e084409cbf6c8f7e03e72326.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE