Behavioral task
behavioral1
Sample
0fbd5a7c47255a1c88feef7edbfdea28.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0fbd5a7c47255a1c88feef7edbfdea28.exe
Resource
win10v2004-20231215-en
General
-
Target
0fbd5a7c47255a1c88feef7edbfdea28
-
Size
11.0MB
-
MD5
0fbd5a7c47255a1c88feef7edbfdea28
-
SHA1
9ace31c672070966158bbb28c2c412293efca467
-
SHA256
cbd9e18d58353e69519023c70636df3d90cef503207bdb354299ac68f7d9bec0
-
SHA512
aa7c8c50b57b93dfe60be8163e14b5c650b0ef2a3cb6aa619f13400411c6b37e1ec797eb37b352aedf71c5d518661ef95541f15ac79616bf18128c322cbf17e3
-
SSDEEP
98304:O108PTOmw04FiET35mCckFR+vicS43H01eGCgv35mCckFR+vicS43:O1bw0SVt33FR+6cPeeGlx33FR+6c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fbd5a7c47255a1c88feef7edbfdea28
Files
-
0fbd5a7c47255a1c88feef7edbfdea28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE