Behavioral task
behavioral1
Sample
0f13dc4c14e5cd15439030c8273c95dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f13dc4c14e5cd15439030c8273c95dc.exe
Resource
win10v2004-20231215-en
General
-
Target
0f13dc4c14e5cd15439030c8273c95dc
-
Size
5KB
-
MD5
0f13dc4c14e5cd15439030c8273c95dc
-
SHA1
567a99d78dc268a0f4d3a0c3036fa4aab242c5d6
-
SHA256
e22df67bf40f9bba0787b83f694a0a7c35f4750057ed0e76d7754928e8f0d1a8
-
SHA512
0ed7095aab8a1e95142bffac5f9961be2e193c5c90da50c2711758094b5258ac2c36890bfb0057fdaeb989477de1361b9be35721a21e105ab87c3be314572a21
-
SSDEEP
96:86zsDgQfGBxBv4DNYZtrjTfJ/Pul+d5DUtPRnUXtWmjrDHcJmGqkMCDRkxX:3sDg2GBxd4xYLjR/e+TDcnUXtW48x3Dw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f13dc4c14e5cd15439030c8273c95dc
Files
-
0f13dc4c14e5cd15439030c8273c95dc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE