Behavioral task
behavioral1
Sample
8b4bc8634acd9fc6a68b5ef9b4d93d4f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b4bc8634acd9fc6a68b5ef9b4d93d4f.exe
Resource
win10v2004-20231215-en
General
-
Target
8b4bc8634acd9fc6a68b5ef9b4d93d4f
-
Size
26KB
-
MD5
8b4bc8634acd9fc6a68b5ef9b4d93d4f
-
SHA1
1ee0943a4f436f6e7b2e29b356074fb2085b7861
-
SHA256
e60dd88fc64d40ff9f7cc8b47f26c3ba49971386b3bd22a3f38cc9fced7ad59a
-
SHA512
3856cc2970d7714a6e26071a7b6d613bd0049e213c3964d1300fee3a1271948811dc8ac1f21ea7bb5dd9e0be2a130db57c5f98fea0c95be290f7f4e0921c9d43
-
SSDEEP
384:4gFuUzkMQ76ddaD7OADUZ6fOP+P4ouYsS/1L4pTXint68Fal4BdXesEf:SCQ/DfwIfz/lLuzKHAm13A
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b4bc8634acd9fc6a68b5ef9b4d93d4f
Files
-
8b4bc8634acd9fc6a68b5ef9b4d93d4f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 25KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE