Behavioral task
behavioral1
Sample
8d4332b5f528673a23fcd96e64cc51c1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d4332b5f528673a23fcd96e64cc51c1.exe
Resource
win10v2004-20231222-en
General
-
Target
8d4332b5f528673a23fcd96e64cc51c1
-
Size
1.3MB
-
MD5
8d4332b5f528673a23fcd96e64cc51c1
-
SHA1
49f234b57185bc351a1856b589107edfbe96e8fa
-
SHA256
d6d2fd6c4a605e560f25ed66155d3af2ea43985c755eed21eabfad24bb73bd2a
-
SHA512
c89135f98a0b6e821d8a5d255b03515e4c7214ab89a6cc33e6249a8002faededb331fddb210cd80d2de32fe82b0775ae368a302a58b4268cb3250942a633094e
-
SSDEEP
24576:/lN1eN3m6iQdFmPnFH8p1FMMvyKhMeBnnuHkivLDmfxt+pmygb5DkWc:/lN1j6iQoap1FHaCMWnuEG36xt+pob5S
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d4332b5f528673a23fcd96e64cc51c1
Files
-
8d4332b5f528673a23fcd96e64cc51c1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE