Behavioral task
behavioral1
Sample
8cd130eb68949908bd6559c7a32329a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8cd130eb68949908bd6559c7a32329a4.exe
Resource
win10v2004-20231222-en
General
-
Target
8cd130eb68949908bd6559c7a32329a4
-
Size
627KB
-
MD5
8cd130eb68949908bd6559c7a32329a4
-
SHA1
42fd93c66e2e8944173de76f9f4752623291dcb8
-
SHA256
dcfefda28bf3cb7f2698bf4ee22b35552d05ef6c31fb24b04f072e4d119b84fd
-
SHA512
faec860b7e50c6d855d47dd757d8f7d26138970da47f6d46473ad1249e19149e4b5febc8e090833bffd0ce597a88d99bc046056b05984e1296de4a968b933261
-
SSDEEP
12288:8iSzsTooRtVABK9d5GMaUHtfMnXn8fbuuQCFlztAWulo3UkEc74cQ:HSd5K9xaUHts8ypQzVutkEcI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cd130eb68949908bd6559c7a32329a4
Files
-
8cd130eb68949908bd6559c7a32329a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 810KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE