Behavioral task
behavioral1
Sample
8a1266395c294b765f1a7ecdc6daaa3a.exe
Resource
win7-20231215-en
General
-
Target
8a1266395c294b765f1a7ecdc6daaa3a
-
Size
784KB
-
MD5
8a1266395c294b765f1a7ecdc6daaa3a
-
SHA1
716640a21ce8f13ca03d329dd0c5bff3e70a96d1
-
SHA256
4e18cc459fd06d64e5bc2c128c3dc5f1fad4a9fe4eb169ab5394f045c50e2f93
-
SHA512
4245a30c5262bab14ee9d06d153fd3bf61cf8eb499a1c9348fef9043c1cfeb6b76153315887edfef9a4db06d88492a83eaef118c67836873d1c6a0572da1c47d
-
SSDEEP
12288:2RtMd12MtZkUs7zhyY0fnUpCi/BTGdsbqBktcelHs42rw5NUXTiZL2wRySve6k:2aFZkBHhyDnUpTIdeOexGE5LqwRZu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a1266395c294b765f1a7ecdc6daaa3a
Files
-
8a1266395c294b765f1a7ecdc6daaa3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE