Behavioral task
behavioral1
Sample
8e1a1344abc05aedfd84b3703630775f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e1a1344abc05aedfd84b3703630775f.exe
Resource
win10v2004-20231222-en
General
-
Target
8e1a1344abc05aedfd84b3703630775f
-
Size
765KB
-
MD5
8e1a1344abc05aedfd84b3703630775f
-
SHA1
0dc001002215346f8660fba9cd7cfa267ed2975c
-
SHA256
5abe7948a82629a5b74a61292f1ba5d065889d02a88dfa918874ff4d3941ba53
-
SHA512
e2abb9d4c0c965aa3a431c858e86687d2adc1e4aa297cc55b626a991962fff364f199c71b133263f7992377eb1478f6b11ca43e685e2e96c8e58f9a0c1fd1382
-
SSDEEP
12288:FKndjzeZHgSAnuG89Yz1JM8Bw56IamRKy1Z196imuBVsflO9dJ5IECpxOokLZsY:F62+nuFUhID196im0VscjukL2Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e1a1344abc05aedfd84b3703630775f
Files
-
8e1a1344abc05aedfd84b3703630775f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE