Behavioral task
behavioral1
Sample
8013be1a8fe66d8e6de2343c44353d97.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8013be1a8fe66d8e6de2343c44353d97.exe
Resource
win10v2004-20231215-en
General
-
Target
8013be1a8fe66d8e6de2343c44353d97
-
Size
133KB
-
MD5
8013be1a8fe66d8e6de2343c44353d97
-
SHA1
98fa8a02379adea700e4a81fa7c5b90cc518909f
-
SHA256
f07cf7700e5b23aa042972a26dbb8c77fd505f651edc828e6a8eca6e8bb7c8bd
-
SHA512
90ab373737a8fc9c1ee53c5c3ffcab4cf9e6906e4d25a7439d361e19d0c17de8f1a986751571256691dd8d4e381d3e9d8440dba95daaf75ce8ee9fe046ba9a18
-
SSDEEP
3072:TqwxEzaA2jebDN3XFPHQYDvQHsI0a+a6D6CgMQ:TqwFP8FHQbMUOD6eQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8013be1a8fe66d8e6de2343c44353d97
Files
-
8013be1a8fe66d8e6de2343c44353d97.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE