Behavioral task
behavioral1
Sample
0f8123df7cf3d74e9bef7c70c010b17176c90c338a39be5aa0e14d10adb4bbca.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0f8123df7cf3d74e9bef7c70c010b17176c90c338a39be5aa0e14d10adb4bbca.exe
Resource
win10v2004-20241007-en
General
-
Target
0f8123df7cf3d74e9bef7c70c010b17176c90c338a39be5aa0e14d10adb4bbca.exe
-
Size
197KB
-
MD5
d09d4257ff23549630551efa8585be53
-
SHA1
dd0e7ce59459ca4362a8d5f94defa2929dc086c3
-
SHA256
0f8123df7cf3d74e9bef7c70c010b17176c90c338a39be5aa0e14d10adb4bbca
-
SHA512
a3a61843b3885045a3b390dcbe0202e3bea90c67c05c1713de2afab979c66bdfb4a6edc7f60cb253a82552cbbf42dba68305f587a14f9cc15a8773a12f0ac9e5
-
SSDEEP
6144:WE0b2IzkAXQ7LPJAWhYDjhsqS2PmpCXY1xTrGhj1boS:WE0qQkpTesYDtkpCXY19rGh1boS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8123df7cf3d74e9bef7c70c010b17176c90c338a39be5aa0e14d10adb4bbca.exe
Files
-
0f8123df7cf3d74e9bef7c70c010b17176c90c338a39be5aa0e14d10adb4bbca.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE