Behavioral task
behavioral1
Sample
8e6223a2243f89e9474ee331f92da4a8f5fbb765c2fab87075ad0f874eee193e.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8e6223a2243f89e9474ee331f92da4a8f5fbb765c2fab87075ad0f874eee193e.exe
Resource
win10v2004-20240426-en
General
-
Target
8e6223a2243f89e9474ee331f92da4a8f5fbb765c2fab87075ad0f874eee193e
-
Size
1.1MB
-
MD5
f9a8aca87919369573c321fbe9d459cb
-
SHA1
7cd5ebc01ee966d83ed10dc3d2d0742f2e7c870f
-
SHA256
8e6223a2243f89e9474ee331f92da4a8f5fbb765c2fab87075ad0f874eee193e
-
SHA512
b59d9ee6a240544fb9748386069ecf5f542aba88305a75786ed9f8eb62ea88ee90a07772e7d8a4a4dff2816dbd155493d3ba8fc04976441fbbe93ec8cc34333d
-
SSDEEP
24576:xuU4N39lzEHPbUU9NuJb7lSwu2Luprvz+aGk8fDlNMNRZjb3Fa2Dpk2Ubv:xl4TlzSPbFup7gg0jz+aDVNRZjb1a2VY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e6223a2243f89e9474ee331f92da4a8f5fbb765c2fab87075ad0f874eee193e
Files
-
8e6223a2243f89e9474ee331f92da4a8f5fbb765c2fab87075ad0f874eee193e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE