Behavioral task
behavioral1
Sample
8fdf37aa99de08390d3f2de3cbe5f74b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fdf37aa99de08390d3f2de3cbe5f74b.exe
Resource
win10v2004-20231215-en
General
-
Target
8fdf37aa99de08390d3f2de3cbe5f74b
-
Size
5.1MB
-
MD5
8fdf37aa99de08390d3f2de3cbe5f74b
-
SHA1
d577dba6432a23a97e54d0515db41e4b08495f1f
-
SHA256
4d2c36675ac9813c53ef3c7f621fbba88dcc9859adc00cdf76a0378f51c15f28
-
SHA512
ac4f07424b8900ee048128a3f16efdc32992fc39f1e474b366b7867b57577a513f911f0d3604731778d464fd40a30a2e2cd733c5e7ffc8caf24d2aa0e2a0ac93
-
SSDEEP
49152:pXVW1+Y8mSj660C/4pFa7+OIAF5CRxcfd9JyYaNay35bkrfg8FYri+ts5EjdZwab:5wrgj8wzIa9yb30g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fdf37aa99de08390d3f2de3cbe5f74b
Files
-
8fdf37aa99de08390d3f2de3cbe5f74b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE