Behavioral task
behavioral1
Sample
0cf66b161af2b61c08ed085dd9aeaa40N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0cf66b161af2b61c08ed085dd9aeaa40N.exe
Resource
win10v2004-20240709-en
General
-
Target
0cf66b161af2b61c08ed085dd9aeaa40N.exe
-
Size
2.0MB
-
MD5
0cf66b161af2b61c08ed085dd9aeaa40
-
SHA1
3a25abe78b6b72d25d75d09a1b2d21bfa3ad5ddc
-
SHA256
85bae4b6d8c9bb31c8f625f6491cafd2a21313ddb748338a1b62f93deb12603f
-
SHA512
fef79154b02fe023b3cbd31e60dad3ef663d4ebca18d52b595e4a5038916072563aac9a29fcbffa1448f0cd1f7bfa961c69eff0fbd723714608acfbb934577a7
-
SSDEEP
49152:bpgYnzwau3DCcAsRXWjv4F6fglm8E7UP61LZbK:bFxu3DCLsRXWjv4I8E7iQLZbK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf66b161af2b61c08ed085dd9aeaa40N.exe
Files
-
0cf66b161af2b61c08ed085dd9aeaa40N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB