Behavioral task
behavioral1
Sample
87c4e590e1b94ac9e84d1890f42acd76.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
87c4e590e1b94ac9e84d1890f42acd76.exe
Resource
win10v2004-20231215-en
General
-
Target
87c4e590e1b94ac9e84d1890f42acd76
-
Size
128KB
-
MD5
87c4e590e1b94ac9e84d1890f42acd76
-
SHA1
16ddf5abef3844231ec282868f76576585a70ce0
-
SHA256
d83a355e8c94a71da4e93d76882699ab23682c639450eea5466055da44aeed00
-
SHA512
e8fe56868f26d58fa249b610b8752eebfae050a1b5b723a9e09e2d4b739514e8574bb18416806bd7e7d79fd691cdd64ba869d7c34f011985c0caeb8b0ae6f36d
-
SSDEEP
3072:FXYS3uKCd+NzMOPe6EiY7UPjp99PLQyojvc4qOPv:5buKCd+NISPjpjsBo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c4e590e1b94ac9e84d1890f42acd76
Files
-
87c4e590e1b94ac9e84d1890f42acd76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE