Behavioral task
behavioral1
Sample
0f8699bcb4fb6b99c68a4262be970752.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f8699bcb4fb6b99c68a4262be970752.exe
Resource
win10v2004-20231222-en
General
-
Target
0f8699bcb4fb6b99c68a4262be970752
-
Size
99KB
-
MD5
0f8699bcb4fb6b99c68a4262be970752
-
SHA1
fddf02b4be7b8253f6e797371e2525b7346c20ae
-
SHA256
0771efb071d01c15c264611ceca4dcdcd1109a470cc93f8235a77d2f8035300d
-
SHA512
47e7e762b696b6c26bd58429d81ad0a57892844c10428475fc1f56f1c0d66bdbd77b727eacb2ae0ff90154f96babc2e00de2f8decf28d7348cb67541ed111c65
-
SSDEEP
3072:sr3KcWmjRrzSA+Wtau/e0Qo6z9phpusCn9hZc0iP7/Sy:/Q+Wt/W0Qo6z9XgOjSy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8699bcb4fb6b99c68a4262be970752
Files
-
0f8699bcb4fb6b99c68a4262be970752.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE