Behavioral task
behavioral1
Sample
0f3869184266f55c8b24c959c4113c98.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f3869184266f55c8b24c959c4113c98.exe
Resource
win10v2004-20231222-en
General
-
Target
0f3869184266f55c8b24c959c4113c98
-
Size
2.6MB
-
MD5
0f3869184266f55c8b24c959c4113c98
-
SHA1
3353fff4ece1cbd91469c98c889f43d82b9bc88a
-
SHA256
626b705efb0c005a2bf177e9fa5fe9e4daed36eb9d816ad8560656ee28489875
-
SHA512
90ffef7794706174196a07bbbe3434f75c8b9801b24b7a3b3749154f7289e31aba65595dd7803bba92f64ddfba20d5833de4dd749a362a42f4ac01c1e0708027
-
SSDEEP
49152:vynYsPwPfVkFeHT/WoYUYgTK6kNwnway3:vySfVkFMxYbfvNd3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f3869184266f55c8b24c959c4113c98
Files
-
0f3869184266f55c8b24c959c4113c98.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE