Behavioral task
behavioral1
Sample
0f0eba725fe9ffc2daa39ff5d7994e04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f0eba725fe9ffc2daa39ff5d7994e04.exe
Resource
win10v2004-20231215-en
General
-
Target
0f0eba725fe9ffc2daa39ff5d7994e04
-
Size
266KB
-
MD5
0f0eba725fe9ffc2daa39ff5d7994e04
-
SHA1
365d4cc46760d03bb1f7b77f9765e0a102647773
-
SHA256
6bf113c97ecf15b6685381829aabeebfc2b39e84776495273103d77eb7b9b7e8
-
SHA512
a97ba04c4d4f094d5c62d900b823ea569962f6d688834a918d7d5609d8594ff6791b7ccca17a4443b195e4099beafd71e09e7e55e294ce47f52f350e93a4d289
-
SSDEEP
6144:IHazXP4TfxURc2oIje9gZrabIzIj/bnOfQ:QazXtFje9g0Dnf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0eba725fe9ffc2daa39ff5d7994e04
Files
-
0f0eba725fe9ffc2daa39ff5d7994e04.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE