Behavioral task
behavioral1
Sample
8e6d77afdf5415af5132c0b9c9342937.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e6d77afdf5415af5132c0b9c9342937.exe
Resource
win10v2004-20231215-en
General
-
Target
8e6d77afdf5415af5132c0b9c9342937
-
Size
133KB
-
MD5
8e6d77afdf5415af5132c0b9c9342937
-
SHA1
d574a8f4e1a744d0647a818b18f327b25c812cc5
-
SHA256
d5e316a315ee29baaaa4470ff3fff21b372749a8997ffb612d1f9b870120ee80
-
SHA512
78c9221a6fc6d7bc86ce22576f50c86b533f6293fc5bdbbb3f0973248a9400d305151bfe32d9e78dfe2e9afc59ff49b80d68cdea3b3cfd9b7caecfb752e15228
-
SSDEEP
3072:T4OwKHbOy0fYTQFFv5SiGVL/wrDLwTDNs9v2BOCn86hppQ:TefbQTQH5cL/wrDLowC86hHQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e6d77afdf5415af5132c0b9c9342937
Files
-
8e6d77afdf5415af5132c0b9c9342937.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE