Behavioral task
behavioral1
Sample
8efdb351a5960d4a2ae8d9a1c390d5b2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8efdb351a5960d4a2ae8d9a1c390d5b2.exe
Resource
win10v2004-20231215-en
General
-
Target
8efdb351a5960d4a2ae8d9a1c390d5b2
-
Size
6.4MB
-
MD5
8efdb351a5960d4a2ae8d9a1c390d5b2
-
SHA1
922e8f8162c709e5c88228454d7842a3e3e0381a
-
SHA256
7dc45b66f271591d5e8eb57e7b0c401666fa9a274cabd72ccfc48b1760608b0b
-
SHA512
121770895aad2490982c7c6936935268dc667c3c7432e3fe3dc60d39847b2d6255797b3ff6109dfa9f50071436c6408d1aac452b6b121b50f33abd42fbea41dc
-
SSDEEP
196608:8fuwTuM/odlhS87cdlLbEmNlVdlhS87cdl8HW+NdlhS87cdlLbEmNlVdlhS87cdw:8fZsS8+42S8V2OS8+42S8b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8efdb351a5960d4a2ae8d9a1c390d5b2
Files
-
8efdb351a5960d4a2ae8d9a1c390d5b2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE