Behavioral task
behavioral1
Sample
880b73ff9ef997a04e1bf82b5c801e05.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
880b73ff9ef997a04e1bf82b5c801e05.exe
Resource
win10v2004-20231215-en
General
-
Target
880b73ff9ef997a04e1bf82b5c801e05
-
Size
1.6MB
-
MD5
880b73ff9ef997a04e1bf82b5c801e05
-
SHA1
56ba701ffe9c0f07b3f89f5f871a85a0993c80bb
-
SHA256
811e68c03e9bd0335573a1bdae719a2878ebd851e97e0fd27d38a3fc1fdf2776
-
SHA512
53034ba2e73087d202707c412bc004071b7c7b0dd0ab7f4ca63c48ceca304198548efda5bb61d345bd47524b86c13c7decfe25a1c6b7089c3243d3501a935291
-
SSDEEP
49152:fUsZtuPORoyR83zCfcakLz0CIWeuJaiCT+AfzDZ1cakLz0O:fxZtuPEoqMzCfcakcCteuJaiCT+Afh12
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 880b73ff9ef997a04e1bf82b5c801e05
Files
-
880b73ff9ef997a04e1bf82b5c801e05.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE