Behavioral task
behavioral1
Sample
8b9c423469e88e100e7db6587d8d46f0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b9c423469e88e100e7db6587d8d46f0N.exe
Resource
win10v2004-20240709-en
General
-
Target
8b9c423469e88e100e7db6587d8d46f0N.exe
-
Size
482KB
-
MD5
8b9c423469e88e100e7db6587d8d46f0
-
SHA1
b956d1754adcaa1e4f5ad97c361ceb8fd8d9e7c2
-
SHA256
c5ec49e395f53850832a6783310e4a894d5e065db897f675d6919a80436e087d
-
SHA512
a0b974a37f413b31ee69decd88052a69cef708e87bc1c26a9110d90928892d053c5ba13f441f7c4e38048cb197c9b473fc0438e94228053b2b4a4c266fdb02f4
-
SSDEEP
12288:VEQoSfqofSZHILHd+W/RzfnToX54T3FDz+23h+g4u+I/yhwqC:VJSpoHZRzuM3FD9N4u+IOwB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b9c423469e88e100e7db6587d8d46f0N.exe
Files
-
8b9c423469e88e100e7db6587d8d46f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE