Behavioral task
behavioral1
Sample
8002f8d4e97aa6ed5d4749e4789e7c8d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8002f8d4e97aa6ed5d4749e4789e7c8d.exe
Resource
win10v2004-20231215-en
General
-
Target
8002f8d4e97aa6ed5d4749e4789e7c8d
-
Size
25KB
-
MD5
8002f8d4e97aa6ed5d4749e4789e7c8d
-
SHA1
5a8db1914d23e39e824fdd6051e3af358d663fdf
-
SHA256
62ac4225389ac37741e2d6aea38f600d0059b095bd96644c2e383d3616c5fd7f
-
SHA512
414cf7660926827ce8a407e1619da94ad18d14616ca16263f592241a82b902bdedae669f63b8d9cea6809da7c62449c49e0014865dbdb4ea01d544c667d1ce39
-
SSDEEP
768:Ys+TtltG7sNnjpJIeLPQuBcD5Xb12y2n72AT22k:U9Vj8eDQTD5XhJW32
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8002f8d4e97aa6ed5d4749e4789e7c8d
Files
-
8002f8d4e97aa6ed5d4749e4789e7c8d.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ