Behavioral task
behavioral1
Sample
8f3fb8e8bf5d256906293ffbfb5f5771.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f3fb8e8bf5d256906293ffbfb5f5771.exe
Resource
win10v2004-20231215-en
Errors
General
-
Target
8f3fb8e8bf5d256906293ffbfb5f5771
-
Size
2.9MB
-
MD5
8f3fb8e8bf5d256906293ffbfb5f5771
-
SHA1
17a73cdae66bec4c450e951f0562a56fb0e00f55
-
SHA256
66b8b577a469a3cbf8b9ed27d41b2d2303eab623a4f1322c776d8491dc86c0c8
-
SHA512
2de6d22e2c0d80e2721391a8908a8f1df795aa9c3925cac504a7f39229e447adfedb1f6beea77347503b3559d3f868d21f44af63ade76525e7dd36666a2f2509
-
SSDEEP
49152:fg+U81nrA25aOEc9LufUN74NH5HUyNRcUsCVOzetdZJ:kxOaOEc5ufU4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f3fb8e8bf5d256906293ffbfb5f5771
Files
-
8f3fb8e8bf5d256906293ffbfb5f5771.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE