Behavioral task
behavioral1
Sample
0b9cb29c3a19d41d398ab4bd25bc9c56999976ed52288c439c7892b7fe99d798.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0b9cb29c3a19d41d398ab4bd25bc9c56999976ed52288c439c7892b7fe99d798.exe
Resource
win10v2004-20240709-en
General
-
Target
0b9cb29c3a19d41d398ab4bd25bc9c56999976ed52288c439c7892b7fe99d798
-
Size
37KB
-
MD5
ef64427db86d8a4c49cb19ae102f5626
-
SHA1
824fed6b5940f33bdcebea4245864f66ce8e5747
-
SHA256
0b9cb29c3a19d41d398ab4bd25bc9c56999976ed52288c439c7892b7fe99d798
-
SHA512
a77c7fc8fd83bdccbffa8386634bcafa682275068a67cece81f6cbde31df1f1728deb041e6102d8600e5191e4df7eb9a6fb88058bf4fac76684af45a72d7c2d7
-
SSDEEP
384:o+RqlM1uqXqazfXJEY+uowCFBhu7rRNQRZfpwKzB8+vRWTzU++:oFqXZhEJuof7oNNQRZxwwB8MsU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b9cb29c3a19d41d398ab4bd25bc9c56999976ed52288c439c7892b7fe99d798
Files
-
0b9cb29c3a19d41d398ab4bd25bc9c56999976ed52288c439c7892b7fe99d798.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE