Behavioral task
behavioral1
Sample
8776af5643e666ccb1adb992dc73f5f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8776af5643e666ccb1adb992dc73f5f9.exe
Resource
win10v2004-20231222-en
General
-
Target
8776af5643e666ccb1adb992dc73f5f9
-
Size
2.9MB
-
MD5
8776af5643e666ccb1adb992dc73f5f9
-
SHA1
cee69ce2e56d470c101dc9c31f8b356e80ec2eed
-
SHA256
5de611c65f197b370dabebea997c0f2935581c273afd870c4ca770ada1b2d79c
-
SHA512
3ea85f293783cccc96774d9ac73ee46d4f3ee4fa72cd7f342e8aa4dc965fd9817b94d5d2b6312079bdb592943162b0baa48cdf1fc789a657cca52f6322e6dfde
-
SSDEEP
49152:ONCydK8rVXyrDR2qKAKczrNN74NH5HUyNRcUsCVOzetdZJ:6erDR2qK/q4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8776af5643e666ccb1adb992dc73f5f9
Files
-
8776af5643e666ccb1adb992dc73f5f9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE