Behavioral task
behavioral1
Sample
fa8b0e0b53f533ba780445b19bffe99c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa8b0e0b53f533ba780445b19bffe99c.exe
Resource
win10v2004-20231222-en
General
-
Target
fa8b0e0b53f533ba780445b19bffe99c
-
Size
1.8MB
-
MD5
fa8b0e0b53f533ba780445b19bffe99c
-
SHA1
76d44add68eb72d07b0dafeb1c5d58e7c8e41ad0
-
SHA256
b2ea903b3aa7b00810a0d33792e5313874ae4e2e381aeb10563237f7308161b7
-
SHA512
338176d5678a23793b16a473a0e77a5b0ea68993235c06a461f2fc96c1f8c06787c15dbf62aa6391577a3e7e1aeda4643b8c7680a0ee146dad5973f2d47dded7
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH7:SCqm2Jpr0nNM7Dus7Nx2b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa8b0e0b53f533ba780445b19bffe99c
Files
-
fa8b0e0b53f533ba780445b19bffe99c.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE