Behavioral task
behavioral1
Sample
826815217c20813955b60a800c835899.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
826815217c20813955b60a800c835899.exe
Resource
win10v2004-20231215-en
General
-
Target
826815217c20813955b60a800c835899
-
Size
5.3MB
-
MD5
826815217c20813955b60a800c835899
-
SHA1
a8544bcfbad95e6a69c02bf34a8f7b4ffa96391b
-
SHA256
d9310aa347bece09de11116bafeb7a9a0b092f94e6fb0e07211b7240aed591c9
-
SHA512
46ca8697a06eb350c46c64eee6ca541b899963bcdd7f0d1af81357ef091890c1213a818e7f2a96e818ae2a6a5219f487e790704336980a39c97699438c838c01
-
SSDEEP
98304:o2SmJOvXepa4HBUCczzMAQ8uO1SPHqNW4HBUCczzMO:o2uI5WC5OE0dWCq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 826815217c20813955b60a800c835899
Files
-
826815217c20813955b60a800c835899.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE