Behavioral task
behavioral1
Sample
8d99e37ce3002f5426dc1af45e2679e5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d99e37ce3002f5426dc1af45e2679e5.exe
Resource
win10v2004-20231222-en
General
-
Target
8d99e37ce3002f5426dc1af45e2679e5
-
Size
79KB
-
MD5
8d99e37ce3002f5426dc1af45e2679e5
-
SHA1
7dddcce9d09a66d33bd11891ef2dac2a23df79d8
-
SHA256
f00f1894c82bc1937cf5c1e4c4320aa79920682afd701a9a6685695e5b1adc78
-
SHA512
1890737b2b85cdadbd04dbd1d2d83de50e75b20d8e5a71c9a88f2d60f5ec51cdc0e4309b398160fb0f168b410416a41fd1d8d2a6f2d5b75bc519e73509a96b12
-
SSDEEP
1536:mMqMEmZ5pCZy9JTeb6v8mpXDy+n2CrKT5:T5CZy990mpXDyR+o5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d99e37ce3002f5426dc1af45e2679e5
Files
-
8d99e37ce3002f5426dc1af45e2679e5.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE