Behavioral task
behavioral1
Sample
03c1d62f0aac5565670c2779f0b7a8e2.exe
Resource
win7-20231215-en
General
-
Target
03c1d62f0aac5565670c2779f0b7a8e2.exe
-
Size
784KB
-
MD5
03c1d62f0aac5565670c2779f0b7a8e2
-
SHA1
0d234f04d9cc84ab984a7cfb9c4f060f7d5e3d28
-
SHA256
7102fe5cdacdaee7f5863f10cbfaa565d20345a408e7b04bf47f17d892e1bb98
-
SHA512
9098ef71a7975edb8109c6f63d9c04ca07127382800b45137e7235a04da2991280f88cdf81dc6acb010819c63be31a912efce01efedc428c28b0f59e7218add5
-
SSDEEP
24576:XDCEeC2hufKRpY5YrpjJ2N7oHDTaPkDD:TCOWSYpY5GGN7oHDT7DD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c1d62f0aac5565670c2779f0b7a8e2.exe
Files
-
03c1d62f0aac5565670c2779f0b7a8e2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE