Behavioral task
behavioral1
Sample
00871ea218f1cdf8cfaf0e8d2fa3901f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00871ea218f1cdf8cfaf0e8d2fa3901f.exe
Resource
win10v2004-20231222-en
General
-
Target
00871ea218f1cdf8cfaf0e8d2fa3901f
-
Size
77KB
-
MD5
00871ea218f1cdf8cfaf0e8d2fa3901f
-
SHA1
b18c7f0a2ac614345f8fc7e347e31e8fba6e9a36
-
SHA256
7153ce847b0d4281ef80a3d928c064cf013f04da0ea0bdaa7ad928ecafeeb607
-
SHA512
918e6cd6acd5b1c4c330898d7e9aae3e60c0eb44a0b6ab0333885a1f246e7e7f96ed856e132dfa1452654a34632e4536781a5afd89dca04cf3e9e7c8b0821984
-
SSDEEP
1536:OZz8vN5bAG2Pooyv3pUjuXw5ANKZKHtjjZ:Ez8F5MG2PS/uj15ANOyp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00871ea218f1cdf8cfaf0e8d2fa3901f
Files
-
00871ea218f1cdf8cfaf0e8d2fa3901f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE