Behavioral task
behavioral1
Sample
8b3cd42368d9a2fed2b1899d9ba5c612.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b3cd42368d9a2fed2b1899d9ba5c612.exe
Resource
win10v2004-20231222-en
General
-
Target
8b3cd42368d9a2fed2b1899d9ba5c612
-
Size
3.9MB
-
MD5
8b3cd42368d9a2fed2b1899d9ba5c612
-
SHA1
e98bf02ee20cce3cf3bb5d372f6eb9d8c14a5b3f
-
SHA256
5c66a913f61601e6440f8fbda0f176ed5aee1be7001cae23150c68182ad32edb
-
SHA512
92711815007e875e7f7034e8e35967d5ca1084e267128be0710540e71a48cccf9430edfb58bf16c966e072c80a3978f692b003924baadfb6f0adc1e8f24bc43e
-
SSDEEP
98304:EmEls6XNDieZD2i7D3xkOxYwpK9CQx64gRAtD2i7D3xkOxYwpKnYsNwPD2i7D3xb:EnXfh7FkNqKnE4gRMh7FkNqKMh7FkNqP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b3cd42368d9a2fed2b1899d9ba5c612
Files
-
8b3cd42368d9a2fed2b1899d9ba5c612.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE