Behavioral task
behavioral1
Sample
86e697e9cf0191a22e52c788b3d0d5a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86e697e9cf0191a22e52c788b3d0d5a4.exe
Resource
win10v2004-20231215-en
General
-
Target
86e697e9cf0191a22e52c788b3d0d5a4
-
Size
5.5MB
-
MD5
86e697e9cf0191a22e52c788b3d0d5a4
-
SHA1
e1684085e911d86754a6a22b29b89b91394306d9
-
SHA256
7914b03c2dff0049385aa55768af13b1c0c1c26ef2ea17d56d1bead0e55a7d08
-
SHA512
eefda89ca9ac29f145657348b1d4bfc9674d8d352060d197aab4ab9fba463161a49e91046cb2bbda3f821ed74f0112e94d2c642e5599f7c76fd3443e0cba39af
-
SSDEEP
49152:TfdM5URovZNKH01D1L59E+EqGf4u646gpC7Zay3vRmCFOGNj8mW4JH53R+wVG+l+:TeDDJT5Gw946AW35mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86e697e9cf0191a22e52c788b3d0d5a4
Files
-
86e697e9cf0191a22e52c788b3d0d5a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE