Behavioral task
behavioral1
Sample
rc8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
rc8.exe
Resource
win10v2004-20231222-en
General
-
Target
rc8.exe
-
Size
529KB
-
MD5
3a5e0a7fa201bb080621133318a56b8e
-
SHA1
c6f667a50ae049e605faa30bd4b2c02c75ce2e5b
-
SHA256
4d9c17e82a36d35e374c1e6f7d3a0f7c6d0a51d7144ded5944e379856d56fd10
-
SHA512
a994ca823cdc53b27a8d38a07ab61bf3e7c639fd0dbf5fd7fd45199cbb3eaa6d6af8aa0ac8a398d910bd13f06745164c0346dd18fb057a25700e571410fda37c
-
SSDEEP
12288:eMvxtw7/GN42UhBWdd0pwcLp2AKxZm627lqcVDtDOyri5:ZvXQnB+Wp3pRKxYl7McVD1Ob
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rc8.exe
Files
-
rc8.exe.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 888KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 477KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE