Behavioral task
behavioral1
Sample
08d93bc5550477c23b63ac0c69db629f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08d93bc5550477c23b63ac0c69db629f.exe
Resource
win10v2004-20231215-en
General
-
Target
08d93bc5550477c23b63ac0c69db629f
-
Size
133KB
-
MD5
08d93bc5550477c23b63ac0c69db629f
-
SHA1
0826fd9dbeebf2ca8aa60c5945a69f77ca9a0108
-
SHA256
1e6875f3bfbe3cbfa714c355bb83511cc75aa5ef81497312bd2f5e3222f3b530
-
SHA512
c87783513950a1e2b630217e9e57bb3c3d2b838e12f4c7371bb5eb004828e6273d809b8901a9c8b264cc7afaa51ce198202d542d27c42f0dcb4c0d3f01c49d1c
-
SSDEEP
3072:QUgRO3k7U9CH/FWta4GJs7mwJ11Slh2qo5BdiF+QYSqyzGhQ:QUgI3gU9etWXGm7Zv1GhGisNdXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d93bc5550477c23b63ac0c69db629f
Files
-
08d93bc5550477c23b63ac0c69db629f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE