Behavioral task
behavioral1
Sample
8c1c68f5bc06a7fba5d723c6246b62f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c1c68f5bc06a7fba5d723c6246b62f6.exe
Resource
win10v2004-20231215-en
General
-
Target
8c1c68f5bc06a7fba5d723c6246b62f6
-
Size
133KB
-
MD5
8c1c68f5bc06a7fba5d723c6246b62f6
-
SHA1
81ba9a536fe2a3fb704b8b8d40ebb6ffddf6cbde
-
SHA256
b35a1ea809762d4428bf1c30c7938233ac35a44177e65d187208410c5f408541
-
SHA512
872f348b116dc66a46e2520f154928447a7daa86150040918c6fcd46917e49bec4e7754617f191a4df4fa84e32c471d9d51def5bacc8f2aff11855eed69aa225
-
SSDEEP
3072:wGmA9+oZwBG5ijDFkxJqfhX4MOKxW2pa/9cdaMI+xtyh89YU9Tez4817s1Q:wozKGcqchX4epK+daMI+xY+Wm7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1c68f5bc06a7fba5d723c6246b62f6
Files
-
8c1c68f5bc06a7fba5d723c6246b62f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE