Behavioral task
behavioral1
Sample
8dffb1851d3a276f2dea5ace8507aa3a53214045b8a31904b6d7464f1ba74f5b.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8dffb1851d3a276f2dea5ace8507aa3a53214045b8a31904b6d7464f1ba74f5b.exe
Resource
win10v2004-20240709-en
General
-
Target
8dffb1851d3a276f2dea5ace8507aa3a53214045b8a31904b6d7464f1ba74f5b
-
Size
27KB
-
MD5
e011a05589bfc0a648ea15e28e468520
-
SHA1
6dff250dab2ecc8f0e773282b1b892dd274be61f
-
SHA256
8dffb1851d3a276f2dea5ace8507aa3a53214045b8a31904b6d7464f1ba74f5b
-
SHA512
22441103f47cb529d8fc64cfadb1546dfdecc9795b015c2d5c5c473cd54fbd56c37b24862624e29ba46fcafeac7f7d8631bcb8fb332c4a896235882cf8973578
-
SSDEEP
96:XbTD3E3kxkYOFsHe+WRIJVge6ygK4bd9u8XhyXrGSccSZmB2FRA:Xb9SYgs++WRGVcj9uKh0rGiCmB2FR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dffb1851d3a276f2dea5ace8507aa3a53214045b8a31904b6d7464f1ba74f5b
Files
-
8dffb1851d3a276f2dea5ace8507aa3a53214045b8a31904b6d7464f1ba74f5b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE