Behavioral task
behavioral1
Sample
87eb5125534ef6c3b4e2ff8761d17cdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
87eb5125534ef6c3b4e2ff8761d17cdf.exe
Resource
win10v2004-20231215-en
General
-
Target
87eb5125534ef6c3b4e2ff8761d17cdf
-
Size
133KB
-
MD5
87eb5125534ef6c3b4e2ff8761d17cdf
-
SHA1
98c95ce772dad966bf887b1e1609857939b555f9
-
SHA256
c4bb5782f21ff2bb67550d099bbfa12f3cfe3eae24ac8d1a42fd301e4a9a1a61
-
SHA512
a6dd2df05c42b4c0fe63c5c32c2a60f1ee2f5dab03e3d5a2787ae724fa12e76282a60ac2dc6dd89429fba4ad07a08261f95419c7d4e911b16c7b921c9d2270ee
-
SSDEEP
3072:u73mwJqL4unfElEI+D2FvOV8ApQQLf04otB0XpB5kQ:u73DJqffE+aVOV56QLfktqX5kQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87eb5125534ef6c3b4e2ff8761d17cdf
Files
-
87eb5125534ef6c3b4e2ff8761d17cdf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE