Behavioral task
behavioral1
Sample
8881b4c9c9eb383b4815a184b716636d.exe
Resource
win7-20231215-en
General
-
Target
8881b4c9c9eb383b4815a184b716636d
-
Size
317KB
-
MD5
8881b4c9c9eb383b4815a184b716636d
-
SHA1
5df23082fbfce8c0fa2213dfd879608b07566737
-
SHA256
25abef9479716df453dc90aea2df94b346387796f376b662c15b7efba0ea92a7
-
SHA512
5019b0f549f666e20beb0c51144f50e3e3fc7e3009cdae8dfc0677c5320054703c8ba25e895e7e015b3a35820d78606e536d5ce8fea32c46f773f916a73d1d5e
-
SSDEEP
3072:GkWT7mcXIql8hlj0btjCkdmI5h/z8S6EAHE9Am:G7uEX24bphdmI5h/4RE9Am
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8881b4c9c9eb383b4815a184b716636d
Files
-
8881b4c9c9eb383b4815a184b716636d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d(=/G$H Size: 261KB - Virtual size: 4KB