Behavioral task
behavioral1
Sample
8f39b3664f478654475a1d8f833b2e53.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f39b3664f478654475a1d8f833b2e53.exe
Resource
win10v2004-20231222-en
General
-
Target
8f39b3664f478654475a1d8f833b2e53
-
Size
133KB
-
MD5
8f39b3664f478654475a1d8f833b2e53
-
SHA1
cfa17763c39fa6224d5bf11e1d8edef94b9b3c8d
-
SHA256
31ea24252fe7375e302cd6adff773affdeea8084e7f74756842a48bec0c90f44
-
SHA512
9bd6f984762665295c237bb888464c4a15ec343b5bd2a944f80fb38bdae0d8f7e5dfb4ef892f8367b1dfb49978cf4569f60282fac12ec35e1b606fd8b299060a
-
SSDEEP
3072:Jph+TXf1+9V+ypTEZU93sIMHTqtaKcdVoS/UX/bDYQJDxQa06Q:Jiz1+9V+yp4I3YzrdVPUX/bc72Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f39b3664f478654475a1d8f833b2e53
Files
-
8f39b3664f478654475a1d8f833b2e53.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE