Behavioral task
behavioral1
Sample
8df4a88b63c8de934e31a5df4325ef6a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8df4a88b63c8de934e31a5df4325ef6a.exe
Resource
win10v2004-20231215-en
General
-
Target
8df4a88b63c8de934e31a5df4325ef6a
-
Size
139KB
-
MD5
8df4a88b63c8de934e31a5df4325ef6a
-
SHA1
87b39d5959e5c283b6a16f06193e3acb76c158e8
-
SHA256
e6c14fc4e60c3cb2fe51cecd7d96b544b50dab2f6c8de83ea075f3dafb4fb4b2
-
SHA512
cf6a29969415ad858a8ce8ba17a166dea1a03c2d311af9a72b1da9999c9c503441db8d01c49150e5dd36930795fe8e4dc617e87c51ba8d96fd55a9f5ede6f3e1
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8df4a88b63c8de934e31a5df4325ef6a
Files
-
8df4a88b63c8de934e31a5df4325ef6a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE