Behavioral task
behavioral1
Sample
0c14dea2568e99dfc11a267dd9bdaa988c8c9abd17eb8c91589eda42c6772121.exe
Resource
win7-20240903-en
General
-
Target
0c14dea2568e99dfc11a267dd9bdaa988c8c9abd17eb8c91589eda42c6772121.exe
-
Size
559KB
-
MD5
e978aa8929c950781c6b9675275cf5dd
-
SHA1
5555805864d1d8d82f51555024553013d9b6459c
-
SHA256
0c14dea2568e99dfc11a267dd9bdaa988c8c9abd17eb8c91589eda42c6772121
-
SHA512
4c09e250811f1b9a48f4472e3094e9d41f7fc0d67a533f1745d69cc8f70f2d46097b3c209acfebfd277feb976339f6bac2e39b0610ca57315097d81810893304
-
SSDEEP
12288:x+xOrozCCYaCphtIYJb6lzOqPpFOblme0pLLsbii9cWDeO7HtoNmKzoSj:COEzCFaCpAYJbwzOqPUlvOsmi9c8Sl5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c14dea2568e99dfc11a267dd9bdaa988c8c9abd17eb8c91589eda42c6772121.exe
Files
-
0c14dea2568e99dfc11a267dd9bdaa988c8c9abd17eb8c91589eda42c6772121.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE