Behavioral task
behavioral1
Sample
02d6d7d94b07bf904266ca8e19003de053777f9058608df1e0d216c60df29eb9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02d6d7d94b07bf904266ca8e19003de053777f9058608df1e0d216c60df29eb9.exe
Resource
win10v2004-20240508-en
General
-
Target
02d6d7d94b07bf904266ca8e19003de053777f9058608df1e0d216c60df29eb9
-
Size
327KB
-
MD5
6a02e975c398ec75348f5f0e35fe2268
-
SHA1
b9089237cb2baacaccc7d845a232aebefdbb3187
-
SHA256
02d6d7d94b07bf904266ca8e19003de053777f9058608df1e0d216c60df29eb9
-
SHA512
a325d91de4ed2127e7dfab52b8eafb3aea6e2fb22ce959ca78484626d0bc2040852e773295981210ac15c081f16c59cad6a30540164bee0c25cd6542bfee2cf0
-
SSDEEP
6144:wxBRXjIHDgw4O/57jf6VbvBLvpeZBmWz/4bfx:kBRXjIjb8rBLrugN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d6d7d94b07bf904266ca8e19003de053777f9058608df1e0d216c60df29eb9
Files
-
02d6d7d94b07bf904266ca8e19003de053777f9058608df1e0d216c60df29eb9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE