Behavioral task
behavioral1
Sample
0bdc2b3ffdc32b501cde9cfbbe1f2550N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0bdc2b3ffdc32b501cde9cfbbe1f2550N.exe
Resource
win10v2004-20240802-en
General
-
Target
0bdc2b3ffdc32b501cde9cfbbe1f2550N.exe
-
Size
49KB
-
MD5
0bdc2b3ffdc32b501cde9cfbbe1f2550
-
SHA1
82c037c8cf71c5e30873d02e37e9db74378f8d86
-
SHA256
f8d0f8844e37f255588fb8142c13ee4c8e4d01e0181aa535fa53f280e279523e
-
SHA512
40d65e736232fe74525bc91805f8e9670870e5aa5149c985f4198d01cfc23491ac2f43004c418ca1b002c948d240f719fa7a903185a7eb996627b221043378ea
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9bJSsJSTJMLJMo:V7Zf/FAxTWoJJ7TFJSsJSTJMLJMo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bdc2b3ffdc32b501cde9cfbbe1f2550N.exe
Files
-
0bdc2b3ffdc32b501cde9cfbbe1f2550N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE