Behavioral task
behavioral1
Sample
8a1a45009a0d922e7bc66a9fe51e0abe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8a1a45009a0d922e7bc66a9fe51e0abe.exe
Resource
win10v2004-20231215-en
General
-
Target
8a1a45009a0d922e7bc66a9fe51e0abe
-
Size
26KB
-
MD5
8a1a45009a0d922e7bc66a9fe51e0abe
-
SHA1
5a61305db68c9d543e490e9aedf3f3c9984701f9
-
SHA256
ea0bc0e479335703d0a93f1c4e5225211cb3e4e67e6f5d7e5f4d76593f2500aa
-
SHA512
0261054b78a0380e171b13df7d00b13850aef25ad0ffc2658c65440f590bf5e8a95fb4fca419d074744dc0f2e1c215ea0964fe26eb8f0ad7fe2a337d53f726f9
-
SSDEEP
768:5AWyLwqHq43GfWaTc/5pwSPtqhJQ7tlylX:d7qK43VH4SPAh0yl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a1a45009a0d922e7bc66a9fe51e0abe
Files
-
8a1a45009a0d922e7bc66a9fe51e0abe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE