Behavioral task
behavioral1
Sample
8de01de2fa995eca55741871139c444b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8de01de2fa995eca55741871139c444b.exe
Resource
win10v2004-20231215-en
General
-
Target
8de01de2fa995eca55741871139c444b
-
Size
1.5MB
-
MD5
8de01de2fa995eca55741871139c444b
-
SHA1
c22239a224eff1a055dc72f41b982ac16574e8bf
-
SHA256
b5d91aba86511126f6a065fa7292d2cb1ff4d98b0ff76876b76e20eccf139781
-
SHA512
30443e2b910cc62af1acaef1ddb47aa91130053de2b454da92dc0082d81948461ec114991ee7cc0f230ee436e0e9dde22f157380ca3848ed012150181ed82703
-
SSDEEP
24576:YK8aEU5pPajAF74kBGkczYa2e4sHyasPL0TMx+CyXRsihW:YKIE4kGknriBCqXWS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8de01de2fa995eca55741871139c444b
Files
-
8de01de2fa995eca55741871139c444b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE