Behavioral task
behavioral1
Sample
85b784614877cff9b0936f6d85e87352.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85b784614877cff9b0936f6d85e87352.exe
Resource
win10v2004-20231215-en
General
-
Target
85b784614877cff9b0936f6d85e87352
-
Size
5.0MB
-
MD5
85b784614877cff9b0936f6d85e87352
-
SHA1
1fc36d07a7695451f12dc281d3375415fe3655ea
-
SHA256
a088cc1ee387ef8eb027f463dc898d8620f2e4b78b5d2d57a43c502e0d6f4a9a
-
SHA512
d97167ada5a987ca66946d0b83f39c4973f7c9cf7d930768ae48d5904d63c84ab4361b4372543ca8a130bfe20f46eb1dc4b9db124f415557c6951624daab1943
-
SSDEEP
49152:b6nkab0suL9H9dLDw2GevsSAxd8UoB9XtRrPVrtUQg7l0VQAw7qLJEH6w6CFw6d:bikfHsaBBtRr9rtU7l0VQjqLiHpfm6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85b784614877cff9b0936f6d85e87352
Files
-
85b784614877cff9b0936f6d85e87352.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE