Behavioral task
behavioral1
Sample
0b3f85cda649455dd5e0124b4bd7edb0N.exe
Behavioral task
behavioral2
Sample
0b3f85cda649455dd5e0124b4bd7edb0N.exe
General
-
Target
0b3f85cda649455dd5e0124b4bd7edb0N.exe
-
Size
95KB
-
MD5
0b3f85cda649455dd5e0124b4bd7edb0
-
SHA1
afe9dce5f31648c492184cc5709e9ab1989394d0
-
SHA256
b097bb17463ec177fd6bc2662dc1b6d8467cc559e171162e6b058f26eab79c4b
-
SHA512
996e547c8c55e0806e80291b2f05a613dc2f34f98f7effbd8a8557def3b5ae0fbeae80d95c81c219c69738d14a61033d5a57a92cf3ab83c53d6ac245fa229b19
-
SSDEEP
1536:V7Zf/FAxTWoJJ2WjWZCqCs7Zf/FAxTWoJJ2WjWZCqCf:fny1wny1r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b3f85cda649455dd5e0124b4bd7edb0N.exe
Files
-
0b3f85cda649455dd5e0124b4bd7edb0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE