Behavioral task
behavioral1
Sample
8b4494f5b6d0c3f488c391d475a3debc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b4494f5b6d0c3f488c391d475a3debc.exe
Resource
win10v2004-20231215-en
General
-
Target
8b4494f5b6d0c3f488c391d475a3debc
-
Size
133KB
-
MD5
8b4494f5b6d0c3f488c391d475a3debc
-
SHA1
10883ffc3b252ad9fcc1d9f13392befed6cda8a7
-
SHA256
ebae4819a5f6192aabf95db83f7f685f9a9fdf2a12398e09ef729126590b484f
-
SHA512
e734906c67f5263499e430eff47e17a9fec70d45fbd835597815eb41b8cc5da0414a879c4bb170d0e3f071aecdb821dd7bfeb2291e6a2e8fc10d4ae6752d99c6
-
SSDEEP
3072:gTAh6pCjqTsQW2BeKujHGkP8LaFcoVgo/OiQ:gT6deTaedMGkP8LajVlOiQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b4494f5b6d0c3f488c391d475a3debc
Files
-
8b4494f5b6d0c3f488c391d475a3debc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE