Behavioral task
behavioral1
Sample
8c44b815b7ac8a25da0563442c796c86.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c44b815b7ac8a25da0563442c796c86.exe
Resource
win10v2004-20231215-en
General
-
Target
8c44b815b7ac8a25da0563442c796c86
-
Size
125KB
-
MD5
8c44b815b7ac8a25da0563442c796c86
-
SHA1
fa136267eee9ffdd290a1769e8d9097bfa302e0a
-
SHA256
7b9204a7bc31608b95440b159a263308c3afbbb63935cd06a6f2aa9d1711045c
-
SHA512
dbf17fc573ba439bb515746ad318c9bc1db9e9143391a52a16b8710c15f5e38ea41638495f8c819697205d3b90b67fb66bbc4028b23ee699c034a0269dc39103
-
SSDEEP
3072:y6/fF6de4ocRzlmksJLMsXZT/J1PsoutY:Bd0bocFlYJwCZT/woS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c44b815b7ac8a25da0563442c796c86
Files
-
8c44b815b7ac8a25da0563442c796c86.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE