Behavioral task
behavioral1
Sample
8d539f8e86c270a080a0ed13cd64db2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d539f8e86c270a080a0ed13cd64db2c.exe
Resource
win10v2004-20231215-en
General
-
Target
8d539f8e86c270a080a0ed13cd64db2c
-
Size
1.3MB
-
MD5
8d539f8e86c270a080a0ed13cd64db2c
-
SHA1
510a7b57d6d96fab89122ad6f1c01bc2002c0aeb
-
SHA256
0bec4c0d0e3db0e42596d73189f7a63d1eccc2717f402e686d9ec95f31be69af
-
SHA512
5cb4ce830087a09631a428a641eab62106c917b46ff88a697a8bad1368a6e1f666b010b5907310483cf28d79502b6cc06e0cf8d17fc3bbf20184754fa867c16f
-
SSDEEP
24576:h2a4ujt+XzlucckQGON5iN1Q04Bk/rN6BqQqjsU9/9Us:v4ujt0zdROniN+04BBBqpXR9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d539f8e86c270a080a0ed13cd64db2c
Files
-
8d539f8e86c270a080a0ed13cd64db2c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE