Behavioral task
behavioral1
Sample
0fb65c7aea3d6fb72c24367384a031a8507dda55dd20ea7e1050ec9d6099c217.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0fb65c7aea3d6fb72c24367384a031a8507dda55dd20ea7e1050ec9d6099c217.exe
Resource
win10v2004-20240508-en
General
-
Target
0fb65c7aea3d6fb72c24367384a031a8507dda55dd20ea7e1050ec9d6099c217
-
Size
640KB
-
MD5
4bb71bb32e8309c24c8ca2e29d6103dc
-
SHA1
8acc0370020b69a1bb96c8b07e59b4dd4028ee2f
-
SHA256
0fb65c7aea3d6fb72c24367384a031a8507dda55dd20ea7e1050ec9d6099c217
-
SHA512
c17bef6261730811d7e7b5662d1387e1a4327e9c2ade9e3b5dd0b60f67ed71a744f1f3f2624b86b9c37976914e797617450ae8efcd90d59ef042ddc8da88cf90
-
SSDEEP
12288:d8hn/QAuoiDa6n+ljpWjK8TJLz+cjWk9TfhKR5v+72L4AYLdPEm7jkda:d70ipm0jmcSOhGA+uMZda
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb65c7aea3d6fb72c24367384a031a8507dda55dd20ea7e1050ec9d6099c217
Files
-
0fb65c7aea3d6fb72c24367384a031a8507dda55dd20ea7e1050ec9d6099c217.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1024KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 574KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adate Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adate Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE