Behavioral task
behavioral1
Sample
8e128f696467f38fec17c1db67a8e4d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e128f696467f38fec17c1db67a8e4d7.exe
Resource
win10v2004-20231215-en
General
-
Target
8e128f696467f38fec17c1db67a8e4d7
-
Size
209KB
-
MD5
8e128f696467f38fec17c1db67a8e4d7
-
SHA1
87754d4d05da8594598d18521fd503151a3a494b
-
SHA256
08c34efb64d7587dac47d0e385acc2dad3afbc70c732d77cb6f558006bdcac9b
-
SHA512
588d9406bbdd19c2ed824bd5e0a909edb907eb49deedd3a7cd10dc6f517b61155f247784111d93a685adf2d7afb785d663d169f0bc093bb98af457c7dcfb8319
-
SSDEEP
3072:xI+Gq6JtVQzjHGs4840WuKuuIJ8/r0dxXQ2Qi4SSmB7D5c+g17out:ItejHGs48CItxXQISwDyoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e128f696467f38fec17c1db67a8e4d7
Files
-
8e128f696467f38fec17c1db67a8e4d7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE