Behavioral task
behavioral1
Sample
8a21e83012a9f656358426cc033d6f3b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8a21e83012a9f656358426cc033d6f3b.exe
Resource
win10v2004-20231215-en
General
-
Target
8a21e83012a9f656358426cc033d6f3b
-
Size
858KB
-
MD5
8a21e83012a9f656358426cc033d6f3b
-
SHA1
a4f7d6d62052a87c4e34d4c47399b4d3ba58c9d2
-
SHA256
dbe418dce54fcea47d093b891ebf1848d1f3b78fc172d6c33bd3bced212681c1
-
SHA512
873eb036a2537f37b76de5087f20d5d6b23ec56069be85cadead9e5b2c7862b67bab2a7d338eaf613bd14b03cba7992e2c16aa2f82f111046038460d2dc89fb1
-
SSDEEP
24576:doTbV3acZHF2oBCyMiXlj/N+hKPcmxyeT1go3id3Y8rIvJ/+fahBtF:yTgcZHUYSiXlTeKPcCJBg+iltOJ/+fq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8a21e83012a9f656358426cc033d6f3b unpack001/out.upx
Files
-
8a21e83012a9f656358426cc033d6f3b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 822KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1003KB - Virtual size: 1002KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ