Behavioral task
behavioral1
Sample
8ff51537d71f315e891ab356db1029d4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ff51537d71f315e891ab356db1029d4.exe
Resource
win10v2004-20231215-en
General
-
Target
8ff51537d71f315e891ab356db1029d4
-
Size
10.2MB
-
MD5
8ff51537d71f315e891ab356db1029d4
-
SHA1
35987e3dff8652a45f6fc07fd4a8a8153dd21655
-
SHA256
1c0ded720320d518f9167973a113a1029dc72362fa168982ef707f6e463bc7c4
-
SHA512
b07fe3b13a0682531e7c667c96f578b1e0bf2219d22c2e1bbd1ccd87b333f2f1667272ffbf9a97cf611988024ac948130fa801a6435a804311d055722c55b52c
-
SSDEEP
98304:c/N/oEFwe/Pb0Aw2wi9L3u981147roaFgQg43MUZYUwL+q+K3u981147roaFgQgI:UNhh/Q2wB98nQgD898nQg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ff51537d71f315e891ab356db1029d4
Files
-
8ff51537d71f315e891ab356db1029d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE