Behavioral task
behavioral1
Sample
8da8d3c4b63eace3a85d944a13df34742c3772d08ce8dfe59a9246cddbc0e27d.exe
Resource
win7-20240221-en
General
-
Target
8da8d3c4b63eace3a85d944a13df34742c3772d08ce8dfe59a9246cddbc0e27d
-
Size
270KB
-
MD5
caec1e0c03f0c1e15f8a6d4bc2bf9830
-
SHA1
0dd1004f1927938808ce57b9f82126a94951c869
-
SHA256
8da8d3c4b63eace3a85d944a13df34742c3772d08ce8dfe59a9246cddbc0e27d
-
SHA512
811ae24a140cbc6971be446b8f6082c9949f0f60038c5cbddf5d5321836f004561748e91900e4be84625e6bf3d8f3c13a8bdb295c30950509bfe0a73219f3eee
-
SSDEEP
6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmbyw:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPqp
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8da8d3c4b63eace3a85d944a13df34742c3772d08ce8dfe59a9246cddbc0e27d
Files
-
8da8d3c4b63eace3a85d944a13df34742c3772d08ce8dfe59a9246cddbc0e27d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE