Behavioral task
behavioral1
Sample
88bb977ff9f816a9a5788a8d78eaf4ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
88bb977ff9f816a9a5788a8d78eaf4ee.exe
Resource
win10v2004-20231215-en
General
-
Target
88bb977ff9f816a9a5788a8d78eaf4ee
-
Size
4.9MB
-
MD5
88bb977ff9f816a9a5788a8d78eaf4ee
-
SHA1
437cbdb2fd248fd35a33717e7fddf47b54ffb8b5
-
SHA256
639aeb8994deb31005d4e89809ef6133991b37387833d107370f91552ca2551f
-
SHA512
b756710541ce14bb91de58c745626ef346aeccdb241d927c32bfb04e4dd39bdd21f4b32282502f1a14998ba3be36c5f4dd81910d0f14bd41b364d1b7254524b1
-
SSDEEP
98304:iKeqOlVi32V1kXcakcibiqhxSTHeG1Uv3ZcakcibiqhMbMgOn7n0bcakcibiqhgF:izqiKmGXdlirWjBUv3ZdlirybMgOnkdh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88bb977ff9f816a9a5788a8d78eaf4ee
Files
-
88bb977ff9f816a9a5788a8d78eaf4ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE