Behavioral task
behavioral1
Sample
086e85d656459f45f1caeddd2e3070fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
086e85d656459f45f1caeddd2e3070fb.exe
Resource
win10v2004-20231222-en
General
-
Target
086e85d656459f45f1caeddd2e3070fb
-
Size
375KB
-
MD5
086e85d656459f45f1caeddd2e3070fb
-
SHA1
814378d1e8717bfecab5d8084d44e3229cc5ec9a
-
SHA256
e279c8ee45a60ab3aeddcd84a4d8f3035e985023d2d1cffa0990f259f57c27ae
-
SHA512
4fe5e56218c9ce24c8d5a55be9015d2747c6ea427cf084762c057086358c46089bf2aa4f0810c89f6536e5a2e2381884d4b35ff8c5b56ae9bcc20de2f8d958ce
-
SSDEEP
6144:sPqKJzTqTcd0PA8UsF9Bck1Ig2e/tmZSybifePMiD3exx0nywog0ABa+ZWIgsHZ3:bKViCKF/zV7/6imRO30ywotkrgg5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 086e85d656459f45f1caeddd2e3070fb
Files
-
086e85d656459f45f1caeddd2e3070fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 504KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE