Behavioral task
behavioral1
Sample
0ceeb52fc7022e439ed1cf5d047afd2b3da923f2db73502ea0ca8c6c1e16dd22.exe
Resource
win7-20240729-en
General
-
Target
0ceeb52fc7022e439ed1cf5d047afd2b3da923f2db73502ea0ca8c6c1e16dd22.exe
-
Size
576KB
-
MD5
6a93828d5e18ee49b62295ea9fa795cd
-
SHA1
185bec877a4255e6a20c79e12b91ac2f6fe3390b
-
SHA256
0ceeb52fc7022e439ed1cf5d047afd2b3da923f2db73502ea0ca8c6c1e16dd22
-
SHA512
5ea89a128df120ae565e8da05c427907924a86a5974032edee393592807f3c678bcdf9db40ba1c108b98a9537099bf728c0fd3412df07275880bb6e053d10416
-
SSDEEP
12288:+NWPkHlUkErBuxQ4uzi6d6dL/yiXLzeMdK6io8levy0FhVlpzkzDDoSD:+NWPkHlUfBgpuPdWzyuDTifgyWl8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ceeb52fc7022e439ed1cf5d047afd2b3da923f2db73502ea0ca8c6c1e16dd22.exe
Files
-
0ceeb52fc7022e439ed1cf5d047afd2b3da923f2db73502ea0ca8c6c1e16dd22.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE