Behavioral task
behavioral1
Sample
8f3f51aee8459bf4eceaa9ae5fe6aecf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f3f51aee8459bf4eceaa9ae5fe6aecf.exe
Resource
win10v2004-20231215-en
General
-
Target
8f3f51aee8459bf4eceaa9ae5fe6aecf
-
Size
2.6MB
-
MD5
8f3f51aee8459bf4eceaa9ae5fe6aecf
-
SHA1
70c5de3ecd33c2ed1abe0f054c1b0e0567f3579a
-
SHA256
2d73d12dfbb2018377178a4c1e0c8895f9fa2f2ca6f4840ed07750cec9211322
-
SHA512
b5dfc7368872e1e7eb7b83e8009bcfbde322c9e37bfaf3cd4c3bd52757f670c7f922b46c09ed3d0cb8ac02e82a10508674534cab5c7ae08b5573b4169fe3cf29
-
SSDEEP
49152:frf6/rLZiL77sDPaXaB4g7cl03vUDaOBsqD2qay3:TarhTRNri3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f3f51aee8459bf4eceaa9ae5fe6aecf
Files
-
8f3f51aee8459bf4eceaa9ae5fe6aecf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE