Behavioral task
behavioral1
Sample
8cff9442899105f875f38d8c62c5bfa4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8cff9442899105f875f38d8c62c5bfa4.exe
Resource
win10v2004-20231222-en
General
-
Target
8cff9442899105f875f38d8c62c5bfa4
-
Size
402KB
-
MD5
8cff9442899105f875f38d8c62c5bfa4
-
SHA1
9403211b467b183aba723215d3d54e48e4ccb31b
-
SHA256
19ad54347a3ad0d13a80ad48fad54fedd4969a9adef3f6d49fbe5d9ccbf67e1d
-
SHA512
404e1b2a822f3a8a853bb8a79ffd066e71f8c604ba9a07ef81355b41234a48de98cb5a2c8c81be86ca69b498dd8d9bdc930873818582607e114da7bd6d95b2db
-
SSDEEP
12288:fAfydTvkPpbt9KjeMfIxj2fIN+9m/n6HLDhM:Yqhvk1t9vt2fNm/wLd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cff9442899105f875f38d8c62c5bfa4
Files
-
8cff9442899105f875f38d8c62c5bfa4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 632KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE