Behavioral task
behavioral1
Sample
8659efcfac4f44f4f7939196946351ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8659efcfac4f44f4f7939196946351ce.exe
Resource
win10v2004-20231215-en
General
-
Target
8659efcfac4f44f4f7939196946351ce
-
Size
1.7MB
-
MD5
8659efcfac4f44f4f7939196946351ce
-
SHA1
e923b6172bd13b05a426d0084adb0c89b841647e
-
SHA256
eb8be3a0812cf047ded6cca56c8c5ec9cb839c86bafc051a0cfd301734606d65
-
SHA512
e6478cd59e5ecac842096f8bb9f29be77a612c36468bf7090cfa0ffb696c3ca531197f922a3aad50f6fff870348fc246bc781807fcef7a8693759d1a5ae0b4ba
-
SSDEEP
6144:wKnabNqGm9RPGzG2aAeZIOqE0VwXCfVqggJtBfKgSb+vU6pwilvmT2R+vlXZ:wlNDaH2aovlXZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8659efcfac4f44f4f7939196946351ce
Files
-
8659efcfac4f44f4f7939196946351ce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE