Behavioral task
behavioral1
Sample
8c05a4b039aaf944c6fbbf2e86e71ebc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c05a4b039aaf944c6fbbf2e86e71ebc.exe
Resource
win10v2004-20231222-en
General
-
Target
8c05a4b039aaf944c6fbbf2e86e71ebc
-
Size
133KB
-
MD5
8c05a4b039aaf944c6fbbf2e86e71ebc
-
SHA1
8d6a1a82ab13c068e0ccb2d7d89ea450ccdfa28d
-
SHA256
f1627c7b3ecfef92bd47cb427c95f45c06d1081a277f135e66a5f0cf624e483f
-
SHA512
73eefd01f36724a43abff3615af15aba2c809f61fb8249a27cf6c754f5372907427ebd74b03f401908c13ef534e9d83738f1e7209bff40c92d650387260a3984
-
SSDEEP
3072:jyPOFU20TGimNVe6erHPWSictPo7NBHUbz/M5xyXQ:jQOFeiiX6QuSNtPMNB0//OxyXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c05a4b039aaf944c6fbbf2e86e71ebc
Files
-
8c05a4b039aaf944c6fbbf2e86e71ebc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE