Behavioral task
behavioral1
Sample
f0c34f65059e7ed73786922f5abe2482242ebd0b12f503181d4d3ab3c4970dc6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0c34f65059e7ed73786922f5abe2482242ebd0b12f503181d4d3ab3c4970dc6.exe
Resource
win10v2004-20240226-en
General
-
Target
f0c34f65059e7ed73786922f5abe2482242ebd0b12f503181d4d3ab3c4970dc6
-
Size
319KB
-
MD5
d103e4d3fea5a77036cc210de4876667
-
SHA1
82c9f3c7da3ba33c7d5aaccf73909ee6fe7b9c5f
-
SHA256
f0c34f65059e7ed73786922f5abe2482242ebd0b12f503181d4d3ab3c4970dc6
-
SHA512
056fcf05cb9e42c69fcef0251850e733dfdc59f0911a244934691c18dd023ba88a6c62f109fb6bf19ea0fae224a1bfc4fe18036d97b4de030205ccf6b410d4a1
-
SSDEEP
6144:1WsjKUyH5mTPqstiaKPBxBjYFAQmto2JbfmAAnoS:1ljBfissBTjPvto2JbIoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0c34f65059e7ed73786922f5abe2482242ebd0b12f503181d4d3ab3c4970dc6
Files
-
f0c34f65059e7ed73786922f5abe2482242ebd0b12f503181d4d3ab3c4970dc6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 664KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 309KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE