Behavioral task
behavioral1
Sample
8854ab08b57752ddbb1ae9689d0e24b3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8854ab08b57752ddbb1ae9689d0e24b3.exe
Resource
win10v2004-20231215-en
General
-
Target
8854ab08b57752ddbb1ae9689d0e24b3
-
Size
28KB
-
MD5
8854ab08b57752ddbb1ae9689d0e24b3
-
SHA1
b9f04ea4c4b7d0dc491766272b318030f66aaa69
-
SHA256
e5f9812d156036e96737add8376ae2b383c04d29cd438042dcccb9a4cffa20d8
-
SHA512
e5b6052a0c42425137db4d8ba377dcb40110759958cb9d991c2cfaca00d5019f36c9fcf79eed4aee33ed13175908202f51c1ad41812ecbacee9a573109bd82ec
-
SSDEEP
384:jlZ/O/vFybrAC5qwcvBOTIVGEEN+z/Ev6lyOE:jl3XZ5qnkTIVsN2Ei0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8854ab08b57752ddbb1ae9689d0e24b3
Files
-
8854ab08b57752ddbb1ae9689d0e24b3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE