Behavioral task
behavioral1
Sample
8ca0b640ae63f924436261376615039a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ca0b640ae63f924436261376615039a.exe
Resource
win10v2004-20231215-en
General
-
Target
8ca0b640ae63f924436261376615039a
-
Size
5.3MB
-
MD5
8ca0b640ae63f924436261376615039a
-
SHA1
2f753d41f523e2257a05a51e7e671f5e57b2567b
-
SHA256
0a3661f0394f2c35c733e5776071774f7612cb2e144c611a7f42df6eb85883dd
-
SHA512
4573047097be580408b25969e9a1c852eef928c44494dcd655fc8bf8b16971c2a530eb7c5647f75e9d8081fb7e05df0db7a2880fa20541569cd1f7c5c0eda0e7
-
SSDEEP
98304:vem/1gwg8Lt8ex0MFwEWAa8Z6TFkg00j4lTfrOL118ex0MFwEWAaf:vxdgCGextwtyCjErHextwf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ca0b640ae63f924436261376615039a
Files
-
8ca0b640ae63f924436261376615039a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE