Behavioral task
behavioral1
Sample
8d2104754d842e86f62e5dfc1b464ce1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d2104754d842e86f62e5dfc1b464ce1.exe
Resource
win10v2004-20231215-en
General
-
Target
8d2104754d842e86f62e5dfc1b464ce1
-
Size
49KB
-
MD5
8d2104754d842e86f62e5dfc1b464ce1
-
SHA1
160ac7dc3a184403f27f954b675d9e3132a22855
-
SHA256
cab384af790ec0e421e0528f6c19d49cad07e946175585498f4a9abebbc7bfdf
-
SHA512
8ed0092df1c86a63ec83b099532ab5a393ee99f187592d315b5e7e4411d2c7ed43f6974914a578c5d20860436d77a9f7331db13ffa8919cffada2e7f1d3276b7
-
SSDEEP
768:p12q+vhTsfV+N+KUuxNCYbZ3vQxWHmSbzzO1ZCMC5MGUIk/gcF6:p1d+1sfV+1NCYRvOwmSb+2MC5rjDck
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d2104754d842e86f62e5dfc1b464ce1
Files
-
8d2104754d842e86f62e5dfc1b464ce1.exe windows:4 windows x86 arch:x86
8492b8b3c4b310f509dd6dff0d4fe091
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
MakeDragList
shell32
StrStrA
user32
DdeInitializeA
CallWindowProcA
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE