Behavioral task
behavioral1
Sample
8061c4fe1cef488a87be8d4dc2f79183.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8061c4fe1cef488a87be8d4dc2f79183.exe
Resource
win10v2004-20231215-en
General
-
Target
8061c4fe1cef488a87be8d4dc2f79183
-
Size
544KB
-
MD5
8061c4fe1cef488a87be8d4dc2f79183
-
SHA1
b0c8bc52593165c4d645899aff26142cff9544a8
-
SHA256
be0c3005055ba5900bfa5e9b465a38e4ef5eae3bf6434b05b14518bf0cf022b7
-
SHA512
f826bb69bf66e6da7f0b60d6c23b9ccc6325b3928888bd526b826e552c76beea708ff12e292ac086a559c9a3c62d06f2f7a73c4f0551c208b8516d3d2dd6b103
-
SSDEEP
12288:mzhNVjEf+K2xPgfz6bGqXj/fqZLxUHIg78PQ:WK2PgfzOyZlUHIkKQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8061c4fe1cef488a87be8d4dc2f79183
Files
-
8061c4fe1cef488a87be8d4dc2f79183.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE