Behavioral task
behavioral1
Sample
afc8a84f1e71eed8056108d7da81b121.exe
Resource
win7-20231215-en
General
-
Target
afc8a84f1e71eed8056108d7da81b121
-
Size
784KB
-
MD5
afc8a84f1e71eed8056108d7da81b121
-
SHA1
78f1179d7a15b6ed200fdcea125cb0528613fd40
-
SHA256
f00ebd78ac0cb3c529cb5c4c05a036b784a556bf71f0b02266e1cfe9ac584b50
-
SHA512
62d3232fbceb4d7d54f52fa1e6d038b24b82af9428e89799ff2c3c04d7b752231d99d0e2b2b880f217df93f79159caf089973735e3bbb49695f49c5ef698a6ec
-
SSDEEP
24576:MBeJt4/PF98nmmrugw61wBfT5krVS3Ze:MBe4nF98nBrA1BfTm5Spe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afc8a84f1e71eed8056108d7da81b121
Files
-
afc8a84f1e71eed8056108d7da81b121.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE