Behavioral task
behavioral1
Sample
86c3ed53b8def10d476645ce26e6ef4b.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
86c3ed53b8def10d476645ce26e6ef4b.exe
Resource
win10v2004-20240419-en
General
-
Target
86c3ed53b8def10d476645ce26e6ef4b.exe
-
Size
1.5MB
-
MD5
86c3ed53b8def10d476645ce26e6ef4b
-
SHA1
4068994a8a72ac93b725ed1494206dc0812b6844
-
SHA256
60c45080ee134032570f7537c82ea5439552c602795e37820cfe325bf8c90d7d
-
SHA512
4442d7a2447eee9cbcaeb8a28574a7b03f48f62bca31d002abdb43047caf39e6f1ed363efde40e7d29f405ac0debf28b353e0f0ee3c1a13af0bdd0799c6925ec
-
SSDEEP
24576:sSL+ctcNfNWHe7pM3dhqJFhwbO4X4aNUlQei79bbxINlNN92fKn:s/cOfee7pM3/qJIC4IEURi75bxyz32fQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86c3ed53b8def10d476645ce26e6ef4b.exe
Files
-
86c3ed53b8def10d476645ce26e6ef4b.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB