Behavioral task
behavioral1
Sample
0fcaba69bb15af69eb2cd96814ac2411.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0fcaba69bb15af69eb2cd96814ac2411.exe
Resource
win10v2004-20231215-en
General
-
Target
0fcaba69bb15af69eb2cd96814ac2411
-
Size
3.9MB
-
MD5
0fcaba69bb15af69eb2cd96814ac2411
-
SHA1
5446a6d73459b2c17346e227970cc3961c3f604b
-
SHA256
8be55f5fc15025ddb7f6b04f06a3fce1e689e55d15eb466d0185907063e766fa
-
SHA512
304ea536a6410c980701f34d1ebfec03ee885d5882dcc8197ecf04875d64a8d839690251c82fbecc4ccd8a212839d5340945249d8772b975df7f28dddad8888c
-
SSDEEP
98304:Fg6nlSJ8GlwcakcibiqhMbMgOn7n0bcakcibiqhiC0i/U3MSnlLBJWbctw/cakcM:X6PwdlirybMgOnkdlirWOU3MSn9BJWcJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fcaba69bb15af69eb2cd96814ac2411
Files
-
0fcaba69bb15af69eb2cd96814ac2411.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE