Behavioral task
behavioral1
Sample
8fce1a4bef94a1a92aaa37d15348eb7d4e71688f7a66fe9c499be2add64104c3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8fce1a4bef94a1a92aaa37d15348eb7d4e71688f7a66fe9c499be2add64104c3.exe
Resource
win10v2004-20230831-en
General
-
Target
8fce1a4bef94a1a92aaa37d15348eb7d4e71688f7a66fe9c499be2add64104c3
-
Size
1.2MB
-
MD5
61447691c9635127cadf9eff8a451742
-
SHA1
521fea2540f1a9d256ec1cf12b00c50db22251c6
-
SHA256
8fce1a4bef94a1a92aaa37d15348eb7d4e71688f7a66fe9c499be2add64104c3
-
SHA512
0a8399da30258adc1485c46ba2f4659e22eabb7f419939e14c36a9fa6b01f1f10c4b98e0a53be6bbbc0995614865a7e5b781fbb8623eda0920bc541cc6b9b853
-
SSDEEP
24576:c7srN+gZC98FN83NTWC8iV6g1CDJ2UhpXjSiA3OtThylrWxyxJEHFqLQkOv:0sx+gZ7KBt3VSwUhpXntTclks6mQkG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fce1a4bef94a1a92aaa37d15348eb7d4e71688f7a66fe9c499be2add64104c3
Files
-
8fce1a4bef94a1a92aaa37d15348eb7d4e71688f7a66fe9c499be2add64104c3.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 812KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE