Behavioral task
behavioral1
Sample
8f8e8f4ed2d2b5ad1fe6a5174fe2b59ac2ff61f3368e36172666330069cb78a5.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
8f8e8f4ed2d2b5ad1fe6a5174fe2b59ac2ff61f3368e36172666330069cb78a5.exe
Resource
win10v2004-20231023-en
General
-
Target
8f8e8f4ed2d2b5ad1fe6a5174fe2b59ac2ff61f3368e36172666330069cb78a5
-
Size
27KB
-
MD5
3f2ebf18aa3cc82de4e95b7fdf5f5669
-
SHA1
6c4e968234720fc7613341bac7b3d4c569df5655
-
SHA256
8f8e8f4ed2d2b5ad1fe6a5174fe2b59ac2ff61f3368e36172666330069cb78a5
-
SHA512
a04fd7e07de43ff8288b4b886d7df94d2a31b4da0fc47f4f62112aabd8818a16437f40c364dfbbdbb12e56e16b83b372beffb1bff35df3bea3ec0316b536e042
-
SSDEEP
192:TvxJqAPhpeS1ZK4O3CDHLLlzMZl4vl10GPdYPmVI+tTpXXXcEukUqU4ubvRxK:VUAPk2MZlm5P6d+tTZcS64uFQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f8e8f4ed2d2b5ad1fe6a5174fe2b59ac2ff61f3368e36172666330069cb78a5
Files
-
8f8e8f4ed2d2b5ad1fe6a5174fe2b59ac2ff61f3368e36172666330069cb78a5.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE