Behavioral task
behavioral1
Sample
0f40e860bdae71ae350e5344067ebbc2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f40e860bdae71ae350e5344067ebbc2.exe
Resource
win10v2004-20231222-en
General
-
Target
0f40e860bdae71ae350e5344067ebbc2
-
Size
340KB
-
MD5
0f40e860bdae71ae350e5344067ebbc2
-
SHA1
01d722388a97beb4dda62950e6bb48445e8dcf14
-
SHA256
62f9b49d986ab9b663cece4a09fc25209a27f3bf55f306bb36f4ca179e65858e
-
SHA512
28ed6562cf947eda6a1fdaca0b9fcec81cc8174fca5d82311ac3f85605cae49b5f2089e92a3cfac9c228f668e584ddf84ace899bd42574341a35385e25263db3
-
SSDEEP
6144:4sdL86I5UzsNHfxq+bXuXbVyDihgH2MuphBmQvGjJmKkwVrzed8iqCAT2HG2oS9o:4sdo6IWUHM+bXuXUm2UBfGjJpe2IHG2M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f40e860bdae71ae350e5344067ebbc2
Files
-
0f40e860bdae71ae350e5344067ebbc2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 680KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE