Behavioral task
behavioral1
Sample
08220b1a1e9f10dceb51e079fc97b0786d2ed57fab47e3c27d9bacf5e68ac03d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
08220b1a1e9f10dceb51e079fc97b0786d2ed57fab47e3c27d9bacf5e68ac03d.exe
Resource
win10v2004-20230703-en
General
-
Target
08220b1a1e9f10dceb51e079fc97b0786d2ed57fab47e3c27d9bacf5e68ac03d
-
Size
3.8MB
-
MD5
3a504ffe68119b6e9cf0ba0a629423db
-
SHA1
b8dc7ce5c3208d3f5173860b865aa8e4773baa24
-
SHA256
08220b1a1e9f10dceb51e079fc97b0786d2ed57fab47e3c27d9bacf5e68ac03d
-
SHA512
81e6f4109bf88905244cfb771a70ac9bdd2a0d9a16f6fcf05cf15ec235082eb29bde3bd9b224547f35b8b7b5d3dd4bfc2501648adf104c67d031bc0bdbe09f95
-
SSDEEP
49152:ok79QCvZplsmqGqtvquH4USz+NCS3ohHEjTLDGk/7sJdbOO:LZQ7mgtiMS6NCy6H8T7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08220b1a1e9f10dceb51e079fc97b0786d2ed57fab47e3c27d9bacf5e68ac03d
Files
-
08220b1a1e9f10dceb51e079fc97b0786d2ed57fab47e3c27d9bacf5e68ac03d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE