Behavioral task
behavioral1
Sample
8ff1de8c63d0371effcb63acefc36146.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ff1de8c63d0371effcb63acefc36146.exe
Resource
win10v2004-20231215-en
General
-
Target
8ff1de8c63d0371effcb63acefc36146
-
Size
399KB
-
MD5
8ff1de8c63d0371effcb63acefc36146
-
SHA1
488cc3faf9d479d27bba20464781e24301a850fd
-
SHA256
cf54c3be9d27fb9863049cca6ef546f56e671c82f71c3e1e43c231fe3bb34065
-
SHA512
af94f9b9144f617b06f03af39d045346f3b45d6b39c2906d5e96647f5d3fcf5fea7f79c2b36d44501d80edef384229235de40f15f5428bcd717cb68c51968cc9
-
SSDEEP
12288:NPRkqdnxXhyJbwymTZbeGxlyibmB0HXYniWb:LHXhyJMbbeGCi6B03Yn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ff1de8c63d0371effcb63acefc36146
Files
-
8ff1de8c63d0371effcb63acefc36146.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 182KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE