Behavioral task
behavioral1
Sample
8961ab9b9e356c79447545e9f161aeccb66c11a1a77a00350039f73f4b8c75e6.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
8961ab9b9e356c79447545e9f161aeccb66c11a1a77a00350039f73f4b8c75e6.exe
Resource
win10v2004-20231023-en
General
-
Target
8961ab9b9e356c79447545e9f161aeccb66c11a1a77a00350039f73f4b8c75e6
-
Size
4.6MB
-
MD5
ddfbbb292bd3a07b3df8f1180e542c54
-
SHA1
c72706d9509db98115fb6b43fbe63dd06a550970
-
SHA256
8961ab9b9e356c79447545e9f161aeccb66c11a1a77a00350039f73f4b8c75e6
-
SHA512
7b0a0fb3c83bfeca73bf3c7625cb827baca8ec887446e27a79698577900bc03fe9e352e559dc42698ef250aa886a069ba1b7214d703a2a6e655ffe9be5e68329
-
SSDEEP
98304:d6+GJPSQqbMTxYrdRTGupIUBK7ZgXouXeL4/fFRo7vZjfF95:sSQB9GV+UBKFce0/NmBjNT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8961ab9b9e356c79447545e9f161aeccb66c11a1a77a00350039f73f4b8c75e6
Files
-
8961ab9b9e356c79447545e9f161aeccb66c11a1a77a00350039f73f4b8c75e6.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE