Behavioral task
behavioral1
Sample
80352df96d00a8ffe19ccd9c72f6f4b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
80352df96d00a8ffe19ccd9c72f6f4b4.exe
Resource
win10v2004-20231215-en
General
-
Target
80352df96d00a8ffe19ccd9c72f6f4b4
-
Size
2.9MB
-
MD5
80352df96d00a8ffe19ccd9c72f6f4b4
-
SHA1
3200edf9dbb072d01b08afe0f831022b0bd1692a
-
SHA256
6be6062a864c9343a5b05adf7a0a988eb5ddc40bfde0ec59b099d2f23a55e8c8
-
SHA512
b06016c3450d87bd97099f9cab50304a0cb13ba2536e27ba670466e6b2780d1a31ed9e8cca05c7a312ab6ea7c8e6a8fa897dd1f9ea924029bb7a6f72afd3ae71
-
SSDEEP
49152:ouPNV4NKKieHIj2aIokZNCxzmD43hP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:HPv4N0eHsI7e3hgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80352df96d00a8ffe19ccd9c72f6f4b4
Files
-
80352df96d00a8ffe19ccd9c72f6f4b4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE