Behavioral task
behavioral1
Sample
8fdfb3c53253956ea12dcc4cbe7e7c9c8878ea830c798ac44fe6e618babfb5bf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8fdfb3c53253956ea12dcc4cbe7e7c9c8878ea830c798ac44fe6e618babfb5bf.exe
Resource
win10v2004-20230915-en
General
-
Target
8fdfb3c53253956ea12dcc4cbe7e7c9c8878ea830c798ac44fe6e618babfb5bf
-
Size
353KB
-
MD5
c66ef888f27266e88d0ac59a596f2296
-
SHA1
cf6083dfca16bceb6e40f13e4a6880532aa54a20
-
SHA256
8fdfb3c53253956ea12dcc4cbe7e7c9c8878ea830c798ac44fe6e618babfb5bf
-
SHA512
4b1efc44aa9c4bf7f95dfefd406c0329e08f080019f4c0b3410fc6cec325080f5ef290eb206ebb6a79e7eddd680e3561fa40a8b60e90b1af0a2372c488b456ff
-
SSDEEP
6144:aPhvstHMrC6FRWOYUHIXgYOQmY51SeyzRNFdA35fThEW62WeuoS:aBI8FRFYUagYXN51Se8NFdQJaW5WdoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fdfb3c53253956ea12dcc4cbe7e7c9c8878ea830c798ac44fe6e618babfb5bf
Files
-
8fdfb3c53253956ea12dcc4cbe7e7c9c8878ea830c798ac44fe6e618babfb5bf.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 764KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE