Behavioral task
behavioral1
Sample
88198fdc9896d2b9b925ee4147f83e90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
88198fdc9896d2b9b925ee4147f83e90.exe
Resource
win10v2004-20231222-en
General
-
Target
88198fdc9896d2b9b925ee4147f83e90
-
Size
162KB
-
MD5
88198fdc9896d2b9b925ee4147f83e90
-
SHA1
cbd54a6ca0876d66b5d6e912a01107486c4780dc
-
SHA256
e791dfeb349602ca1373db4c88bfe10c9815148dbc632ab9397184ebe1372345
-
SHA512
6ab43f88aee7e84b14ff690d7101e0879ff506bf36bf46532791f050ff8e88bdba77087a2b350ddfe2add2f2412581aefa701ac90821f2a7e0915a0c0995378b
-
SSDEEP
3072:XyTbGWmUwNw7WED8fkykyXcdtxO6vJH9eZGuncH9UJlhZYLp6dVXQq1mf8x8P+WB:iPGg77D88yjWFxH9YGE+ehaLp6nUn93
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88198fdc9896d2b9b925ee4147f83e90
Files
-
88198fdc9896d2b9b925ee4147f83e90.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE