Behavioral task
behavioral1
Sample
8fec0a394bca4903d7b02f57ec823a9a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fec0a394bca4903d7b02f57ec823a9a.exe
Resource
win10v2004-20231222-en
General
-
Target
8fec0a394bca4903d7b02f57ec823a9a
-
Size
363KB
-
MD5
8fec0a394bca4903d7b02f57ec823a9a
-
SHA1
11395afe7a37c5388e6c0887877eef1e54699f95
-
SHA256
9e5dc822242aec50bb06c1d040e64a20ab5461626b8e3bac954425734ed09901
-
SHA512
d9548831455b299604849e151149e28c6ad3af2601f67164648f9a88d3be147d3df32ac975a08b7b8ed78315b48e61304281b34106e641f58ec0207222f31371
-
SSDEEP
6144:hGNkSsEfpdKUljbLzZ+95Ou1r0KXkXZE3kerWh+x/Ap9zuvE2aHrD5UQ6GEypsny:h/TEfeU7E9Ukwy+g1APEE2a8GE1n3W9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fec0a394bca4903d7b02f57ec823a9a
Files
-
8fec0a394bca4903d7b02f57ec823a9a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE