Behavioral task
behavioral1
Sample
85acebc1436e736c1577b6c9dd3a4bf5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85acebc1436e736c1577b6c9dd3a4bf5.exe
Resource
win10v2004-20231215-en
General
-
Target
85acebc1436e736c1577b6c9dd3a4bf5
-
Size
1.3MB
-
MD5
85acebc1436e736c1577b6c9dd3a4bf5
-
SHA1
f82a343e664cb5ea7b41481e76ca935a70461547
-
SHA256
8e9ec4fbc00e811baa2bbedd3d35552a9f4b0d6933404c6bae9e168a75f29742
-
SHA512
1b4f87ee4765cacfdf2cd58d96743366397e7342a4af1c2fb626f5f04f678e896ed9593bcc8a4c79b877840efee517e3e601500ff311b23d6e220c4b494ba6ff
-
SSDEEP
24576:IN5vOiF5oQg8PZ9WIsXBnYWTpT0T61BECHZN8YBPVK5Q4XvG:sZfF68PTsxnreI9T8YhAW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85acebc1436e736c1577b6c9dd3a4bf5
Files
-
85acebc1436e736c1577b6c9dd3a4bf5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE