Behavioral task
behavioral1
Sample
0ed4193e5e95f41cad7fc48eae8e9ca2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ed4193e5e95f41cad7fc48eae8e9ca2.exe
Resource
win10v2004-20231222-en
General
-
Target
0ed4193e5e95f41cad7fc48eae8e9ca2
-
Size
133KB
-
MD5
0ed4193e5e95f41cad7fc48eae8e9ca2
-
SHA1
0ba6db5b3199c78871a162bc0919e5f931367f1f
-
SHA256
e26e079dda2890f809b75a00f12061ed27acd0b51f71dcefa2521eda22134cef
-
SHA512
baba55b7e81f34ef49c15c0047df472d8aba1ea40f4e2c5e5e537bad35dcd19f6d77c5a33342866944b499a7de3d2650837ba133bdfa151b3f0d2fca82f65db9
-
SSDEEP
3072:Ij1WcrWyEyXhn4YvPWsq5xCCO8ekIQtSruUKBq6bVimLaccQ:qschXXvh/Ow/x6bVimLBcQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed4193e5e95f41cad7fc48eae8e9ca2
Files
-
0ed4193e5e95f41cad7fc48eae8e9ca2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE