Behavioral task
behavioral1
Sample
f8f36efa0bd6250f04d9a2d69d264ee2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f8f36efa0bd6250f04d9a2d69d264ee2.exe
Resource
win10v2004-20231215-en
General
-
Target
f8f36efa0bd6250f04d9a2d69d264ee2
-
Size
133KB
-
MD5
f8f36efa0bd6250f04d9a2d69d264ee2
-
SHA1
415e61fd0a343f209b48e539981690e5595eb45a
-
SHA256
311c1a362346a0d8db0493d203b81991c47eec999f9b141fd7b575b7d0bc5524
-
SHA512
5680a8dd4242c74196791c7f764cbe7691e139359adbbccb08ec31150c8329807e8bb5760314504f13d102042612e64b66299b2f2d62890eb73b1046d14583f5
-
SSDEEP
3072:MwSgyKSmF9OTAGKzXuQ1UGj6Y8S6mH2V0VUvtsadcIVlToX2+v917awO456UQ:MyZSZTAdjuQ1ZnQ7iI/Tu2IwUQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8f36efa0bd6250f04d9a2d69d264ee2
Files
-
f8f36efa0bd6250f04d9a2d69d264ee2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE