Behavioral task
behavioral1
Sample
8fbc68458441bef8f7fb82934a1d8897.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fbc68458441bef8f7fb82934a1d8897.exe
Resource
win10v2004-20231215-en
General
-
Target
8fbc68458441bef8f7fb82934a1d8897
-
Size
420KB
-
MD5
8fbc68458441bef8f7fb82934a1d8897
-
SHA1
6228fc36f20506bd05a319bdd62bf5dfa6d252a2
-
SHA256
e82f0ab521e0d141048b86216a22548ab1b4f31030ac6c7b870ce402ce6d2181
-
SHA512
225c885547d3026ae84738f46f80580b730115e1eda67d9152e01fa57de69ebf4c5c99e598096ba53ec9050ad51b20ebcc97bd4e908a7399462cef927aef68f4
-
SSDEEP
6144:Wxe6ibbo4oVb1agkeoTSQ3XHYJAoYYqhZwLr8tFtRM1Oo73dU7nXu:0ebC13Mu24JAoYqUpqUSU7Xu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fbc68458441bef8f7fb82934a1d8897
Files
-
8fbc68458441bef8f7fb82934a1d8897.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 414KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE