Behavioral task
behavioral1
Sample
8b4ab59debc582570461e43a4fa6c767.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b4ab59debc582570461e43a4fa6c767.exe
Resource
win10v2004-20231215-en
General
-
Target
8b4ab59debc582570461e43a4fa6c767
-
Size
152KB
-
MD5
8b4ab59debc582570461e43a4fa6c767
-
SHA1
7673bf1cfb8cca7f51271076f11c739ef94e5b35
-
SHA256
49b78179c92625e07b145daf2d910773858a7e176bc52e48c5af09f26be335b0
-
SHA512
55854578c8a01b23b884cb4d8f27b3d9c7e6b806361e16136fb1e27fb56bb371822e8161f201fa58314abc5d6e0c642559a195ae06ba0ede3d3d1ee06b3b4ff0
-
SSDEEP
3072:/R3mGdgG5tqhjTqGG25XKcppPR36nvE7/kPg7bDBxG8OwRT37P:/ZmGdLXqhXJGeaSqvg8Pg/HJOwRH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b4ab59debc582570461e43a4fa6c767
Files
-
8b4ab59debc582570461e43a4fa6c767.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE