Behavioral task
behavioral1
Sample
0d54002d5b8f028111a19ff175ad3daa50d6fda6f0648fefc15bee96af2a895b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d54002d5b8f028111a19ff175ad3daa50d6fda6f0648fefc15bee96af2a895b.exe
Resource
win10v2004-20240802-en
General
-
Target
0d54002d5b8f028111a19ff175ad3daa50d6fda6f0648fefc15bee96af2a895b
-
Size
63KB
-
MD5
5471cf31048613e30ddecbf33c1bf37f
-
SHA1
63bafff317c240db6abe63f5fa8c93e0a0d50c05
-
SHA256
0d54002d5b8f028111a19ff175ad3daa50d6fda6f0648fefc15bee96af2a895b
-
SHA512
e709380aca7b1c6bc074f21d75359e043d60cb207a4cd3081c30d10a5779539f73382f873e22e125966bb34387587c3d5fbaa7d7319dd7439059f560f30a2867
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiRgNAgNSM:V7Zf/FAxTWoJJ7TTQoQSHSOd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d54002d5b8f028111a19ff175ad3daa50d6fda6f0648fefc15bee96af2a895b
Files
-
0d54002d5b8f028111a19ff175ad3daa50d6fda6f0648fefc15bee96af2a895b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE