Behavioral task
behavioral1
Sample
80316f04e773e1140271390a0880a6ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
80316f04e773e1140271390a0880a6ee.exe
Resource
win10v2004-20231222-en
General
-
Target
80316f04e773e1140271390a0880a6ee
-
Size
5.3MB
-
MD5
80316f04e773e1140271390a0880a6ee
-
SHA1
949fc477b95875465642bd0dbcd359280f76e043
-
SHA256
38fd630e008368030ac68e4232485e1b8c57ef61a74bb3edca301e4c13d9dbf6
-
SHA512
7950ad665a4a7a47b72a517dd31b85ac73a99db99c4a872e9830ca3258d36d73110181d6b8634bf0ed403d96b67322db5f02c7d49468bf7405b47899cd1ce2eb
-
SSDEEP
98304:9VHgvOhtmQxHO51GskFv1ja9MFHhI9nFCaHEPHO51GskFv1ja9MFHj:9VHqOhZxuVWdjqMF6pF/EPuVWdjqMFD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80316f04e773e1140271390a0880a6ee
Files
-
80316f04e773e1140271390a0880a6ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE