Behavioral task
behavioral1
Sample
8845c3a80b27b8fe9a1e7834bdc22b8f729137bfe78bdd30be1498f3f4710e9a.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8845c3a80b27b8fe9a1e7834bdc22b8f729137bfe78bdd30be1498f3f4710e9a.exe
Resource
win10v2004-20240704-en
General
-
Target
8845c3a80b27b8fe9a1e7834bdc22b8f729137bfe78bdd30be1498f3f4710e9a
-
Size
91KB
-
MD5
d615d35cb90f64842b6f60a9acecbcc3
-
SHA1
28a8b1042bc71078aeb624978e6528f9b70022b4
-
SHA256
8845c3a80b27b8fe9a1e7834bdc22b8f729137bfe78bdd30be1498f3f4710e9a
-
SHA512
7b0de9df6b74ab2fe3735f0e91f7baed898cbad79c354de30243f548c68c24dd3e2dc331c44e9649b1d04594a65b6042e026660a85c5ec895235874fe699d009
-
SSDEEP
1536:kRsjd3GR2Dxy387Lnouy8VTf9kRsjd3GR2Dxy387Lnouy8VTb:kOgUXoutNf9kOgUXoutNb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8845c3a80b27b8fe9a1e7834bdc22b8f729137bfe78bdd30be1498f3f4710e9a
Files
-
8845c3a80b27b8fe9a1e7834bdc22b8f729137bfe78bdd30be1498f3f4710e9a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BSS Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE