Behavioral task
behavioral1
Sample
f879bd88177cb83f4414449c16fa7977.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f879bd88177cb83f4414449c16fa7977.exe
Resource
win10v2004-20231215-en
General
-
Target
f879bd88177cb83f4414449c16fa7977
-
Size
464KB
-
MD5
f879bd88177cb83f4414449c16fa7977
-
SHA1
e23c7c3dbb75f896b0b4bff3e7bce0e3ce7453fd
-
SHA256
e95fe82d958e861dadbb891aafb2d932e76952cb414a42ca5eedf949caedc9ce
-
SHA512
4f27e752702d9681086428e15aa32f581e4e48642d2037738d782bd6195ec9d9ead75496fae364657c8ea4e4fb9017946d41b1064e72e95f6a426a6603d141a6
-
SSDEEP
6144:g/ATtfnciTWBu3WCPWi4+nloPxH36qC8C0lR1zlq0YCo9qQSPngfShx:g/It/ciTID4jpoPML0lR15co
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f879bd88177cb83f4414449c16fa7977
Files
-
f879bd88177cb83f4414449c16fa7977.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE