Behavioral task
behavioral1
Sample
8e7fbe722a9787a274e09d82801c3f21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e7fbe722a9787a274e09d82801c3f21.exe
Resource
win10v2004-20231215-en
General
-
Target
8e7fbe722a9787a274e09d82801c3f21
-
Size
338KB
-
MD5
8e7fbe722a9787a274e09d82801c3f21
-
SHA1
b1f52d0721e896351670577a75e52aab47adf42c
-
SHA256
64cc04ac4a212b8881bb6817e6310ac7643f7eaf96958958fc5bfe7121193c73
-
SHA512
568cfecb258c9756a3c9fac8c759d157ea7a1545f4fd0e006044fcdb75840f8ad03e78f94967b0c91aa200b5ef250d85d55a745d99e6b4ec3787009ab202716c
-
SSDEEP
6144:QoRW56QuZOdMfcU7f6n//EWkVU4EaLdatuuzSUYKuS/r40+n:QoogH9BZouySUuSz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e7fbe722a9787a274e09d82801c3f21
Files
-
8e7fbe722a9787a274e09d82801c3f21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE