Behavioral task
behavioral1
Sample
87cff8f50307937d744a8a22f914bc01.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87cff8f50307937d744a8a22f914bc01.exe
Resource
win10v2004-20240226-en
General
-
Target
87cff8f50307937d744a8a22f914bc01
-
Size
866KB
-
MD5
87cff8f50307937d744a8a22f914bc01
-
SHA1
6f96621c1d52e7e6faf2acf1509ff0050da2cdf5
-
SHA256
4fdb3093c9cdb940e7cd2fe08252f46cfb75d7cb82d1cc61fbbfe7b09c56f974
-
SHA512
0eac06fcef0ef1e8533e1ccba13e7d73f8c9d889360b74a6d91987cc1a5a5cc875124f7f1c782270eddfd4c4b744894481b7200d24bf5ad1a616b3f51b173984
-
SSDEEP
24576:t2/T4skXBvG4h/wC4bKPbLLlzMFPUF0ZbSwvTaxH1lt:Q74smNG4KCeKPXhzMFc2ZbSwraxH/t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87cff8f50307937d744a8a22f914bc01
Files
-
87cff8f50307937d744a8a22f914bc01.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE