Behavioral task
behavioral1
Sample
086a68d49932871a35e873a4f91a5416.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
086a68d49932871a35e873a4f91a5416.exe
Resource
win10v2004-20231215-en
General
-
Target
086a68d49932871a35e873a4f91a5416
-
Size
2.9MB
-
MD5
086a68d49932871a35e873a4f91a5416
-
SHA1
b06780d8d8c533a952f76ff12d40a7085058b1fc
-
SHA256
f8b4034f7ba41f97fc7308fefd125fbd212ab4fe1973151d4e51122464e9e6ee
-
SHA512
5d3ba4cdd961a237e4a819e96bafcfc6513612dc401a718eca934eb4d05fdd497bb9e037eabec1e10da0bc0f904d22c52a96fd19a632e98403dc8daaa7fae39c
-
SSDEEP
49152:+mZYtVIfd2qVuj8a1cdK80dN74NH5HUyNRcUsCVOzetdZJ:Ne/wdszd4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 086a68d49932871a35e873a4f91a5416
Files
-
086a68d49932871a35e873a4f91a5416.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE