Behavioral task
behavioral1
Sample
8d1f7ccfce4d022fc4789f2e50bcacbd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d1f7ccfce4d022fc4789f2e50bcacbd.exe
Resource
win10v2004-20231222-en
General
-
Target
8d1f7ccfce4d022fc4789f2e50bcacbd
-
Size
1003KB
-
MD5
8d1f7ccfce4d022fc4789f2e50bcacbd
-
SHA1
528ab170086b362b7f245102dd08f013dc745f97
-
SHA256
af4ec5df19694a973ff96c7fa8c63cbe8aab2057babc9987a90294feaaa866ef
-
SHA512
20e52102c2a06011b115dd4deb9be3845860950075197b56957284e8ae648ad1a24bd540cab05a3f634ba6e46f31df515b0e1da4001804d4ec468301f4344f0e
-
SSDEEP
24576:ZHb0ZDsi61wKidyyFLKp1yaYfWGv1wDU2UTQVAU:Rb0tt61wZdyyFLKp1yag+DXUTQVAU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d1f7ccfce4d022fc4789f2e50bcacbd
Files
-
8d1f7ccfce4d022fc4789f2e50bcacbd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE