Behavioral task
behavioral1
Sample
8c08520a0fa760ccf6b2aa903ff49d033ef36451516c02ce0b0481431ce77902.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8c08520a0fa760ccf6b2aa903ff49d033ef36451516c02ce0b0481431ce77902.exe
Resource
win10v2004-20240508-en
General
-
Target
8c08520a0fa760ccf6b2aa903ff49d033ef36451516c02ce0b0481431ce77902
-
Size
8KB
-
MD5
7058f903ff825e5e0770be7cde319757
-
SHA1
183d4e633ebb14cb17fccbdcee8d665669099bf3
-
SHA256
8c08520a0fa760ccf6b2aa903ff49d033ef36451516c02ce0b0481431ce77902
-
SHA512
bb342ab67763c83ef0b1e0ea54f28f1af7c0f32bbc022c84016b2a098903d13c2154878b9a0571dc248215db97fcfc637c78be5355a664aa26d844ed293bc904
-
SSDEEP
96:VjG8vGHrV8b+3DtXZq1CjIU2pPOjTLO+sBv2cIrLZU2B4qoZHqzhNix435Ba:VjG8OrVe+3G1PpPOTO+qAFBd0qzhNdQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c08520a0fa760ccf6b2aa903ff49d033ef36451516c02ce0b0481431ce77902
Files
-
8c08520a0fa760ccf6b2aa903ff49d033ef36451516c02ce0b0481431ce77902.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Zyxwvut Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FlexiNe Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ