Behavioral task
behavioral1
Sample
8bc18b1d6cec2f4160c1d21083a557eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8bc18b1d6cec2f4160c1d21083a557eb.exe
Resource
win10v2004-20231215-en
General
-
Target
8bc18b1d6cec2f4160c1d21083a557eb
-
Size
147KB
-
MD5
8bc18b1d6cec2f4160c1d21083a557eb
-
SHA1
ba9ecab4f51a9ecc5a66193f87a9a772947699bb
-
SHA256
2fdbc89474480f83e73eb41136cc4ad7f249996c3c836543649eccca621005a4
-
SHA512
621f54aff7e687e203ecc8aa98bfb099935534a843f9ec4103afe8b04dad2af38e730bc42023610a8b267ce1004b7cab60307265eb1a2caa13904f9f41336b5b
-
SSDEEP
3072:8HIOfH8B/+R0Sdxd3qJOcKtTxYcGYaKsWkMJV:e/vN1AOcKTqcRzsW9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bc18b1d6cec2f4160c1d21083a557eb
Files
-
8bc18b1d6cec2f4160c1d21083a557eb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE