Behavioral task
behavioral1
Sample
86a103ef6f232a09ed19db37c5b4dc64.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86a103ef6f232a09ed19db37c5b4dc64.exe
Resource
win10v2004-20231222-en
General
-
Target
86a103ef6f232a09ed19db37c5b4dc64
-
Size
2.6MB
-
MD5
86a103ef6f232a09ed19db37c5b4dc64
-
SHA1
1ee73e9de723ed7ab7d189038a80286a277a7ae8
-
SHA256
70544c6cbe9894ec71de9132678e489c9e613e23018d0908d9a7d3004e0d490e
-
SHA512
3e4c7ddca550fa738f38942201ac8ee063ce7a95302458acb767b884e1c59acb95bb03cd5aa184e58a176b6f1afc348a902172cc831fba23736f037b18ee4a25
-
SSDEEP
49152:pE6efahLoG+9gevkgG9RrDqubeuDaTOifF7Wfay3:pMatonDUdPyLT1JY3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86a103ef6f232a09ed19db37c5b4dc64
Files
-
86a103ef6f232a09ed19db37c5b4dc64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE