Behavioral task
behavioral1
Sample
0e9c4283e2777e7054d850030bb96a006fd56f4a36fb964db535efacea4c1c30.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0e9c4283e2777e7054d850030bb96a006fd56f4a36fb964db535efacea4c1c30.exe
Resource
win10v2004-20240319-en
General
-
Target
0e9c4283e2777e7054d850030bb96a006fd56f4a36fb964db535efacea4c1c30
-
Size
194KB
-
MD5
a2b3943f5e8ed015b11905ce6b38a0b2
-
SHA1
d3eb5a14c16d66652df037d891c6c0e759a01f9e
-
SHA256
0e9c4283e2777e7054d850030bb96a006fd56f4a36fb964db535efacea4c1c30
-
SHA512
8c474f407734f2575e38bcd6c33579e2e1b50e705ba5e0f16173b17ff40831930e794d9d1d9382cd3fceb77bc464dfe5f8bfd8995e1add61c1ef62127cf8083c
-
SSDEEP
3072:a74MyJjjlLzVjN50BdQqlYgp72xzbuawaGO0OJw8KWs6IgVLE7QkfIA:awj30dlZ+GVaRVLE7QkfI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e9c4283e2777e7054d850030bb96a006fd56f4a36fb964db535efacea4c1c30
Files
-
0e9c4283e2777e7054d850030bb96a006fd56f4a36fb964db535efacea4c1c30.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE