Behavioral task
behavioral1
Sample
866dc9b1b8a6514f9db27ff2a9a7a972.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
866dc9b1b8a6514f9db27ff2a9a7a972.exe
Resource
win10v2004-20231222-en
General
-
Target
866dc9b1b8a6514f9db27ff2a9a7a972
-
Size
3.2MB
-
MD5
866dc9b1b8a6514f9db27ff2a9a7a972
-
SHA1
af2e7aa11abc02f7e55261d4d8652e27488f7882
-
SHA256
74891ee8a3fe2e810ff0054294c6771932fae697fb477deda3c2ada2afe3235d
-
SHA512
f9e71003fdc85a1f126fa5f19758809189eabd7ff05ca022235407d4877cdcf4150af495968522c519ce16c3d015bf04346a439ace135e22b51b7f1e9853aa7e
-
SSDEEP
98304:T9v2b3RSM5CJcakchS87ccakcL3bzH3cakchS87ccakcO:Bi3RZUJdlhS87cdlbbjdlhS87cdlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 866dc9b1b8a6514f9db27ff2a9a7a972
Files
-
866dc9b1b8a6514f9db27ff2a9a7a972.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE