Behavioral task
behavioral1
Sample
8cc389b681ca3626fd0bdaad980c69ee.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8cc389b681ca3626fd0bdaad980c69ee.exe
Resource
win10v2004-20231215-en
General
-
Target
8cc389b681ca3626fd0bdaad980c69ee
-
Size
11KB
-
MD5
8cc389b681ca3626fd0bdaad980c69ee
-
SHA1
3cd3f3f5eb0f4fdf6920d76b7f9862eb1c4445bd
-
SHA256
f6f0ac5c99c2e974fc9dd05ee5ac54df692d1d640e83cf44eceb7a7b43abd373
-
SHA512
b26bbebd2369bef413df3baaabf7db0b697c6550bf7f0fbe9ce9ad36d969364b00b6ce98cdbecb6d730153aa9e0179c7366bb2a227f54102a0a5474db611f6d8
-
SSDEEP
192:0XHMOFaENLittYUXmnaUTuSMdiLrn7j8UvJ0vJD45noC/Ax:0XHZvLDU2dediXn8JGBAx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cc389b681ca3626fd0bdaad980c69ee
Files
-
8cc389b681ca3626fd0bdaad980c69ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE