Behavioral task
behavioral1
Sample
8da7f889aa4d9d27810bafcfa1e53b80N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8da7f889aa4d9d27810bafcfa1e53b80N.exe
Resource
win10v2004-20240802-en
General
-
Target
8da7f889aa4d9d27810bafcfa1e53b80N.exe
-
Size
75KB
-
MD5
8da7f889aa4d9d27810bafcfa1e53b80
-
SHA1
4c472809dd2ad4619222f5a2ade600395a40eb43
-
SHA256
bcfd8c8b31350d410a1c15ae67c76d00a7d0fa4d1897c5fb7ec30ad5ce4e617a
-
SHA512
b78eefb6fefd70b20588324e5679d47b74cf81d27651e1be57c574ff3b9003887b12d5fe9bef6362fcd9d2b8c7e268f7427fe387eb5972bc3407d9b29d1c084d
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxL:fnyiQSo6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8da7f889aa4d9d27810bafcfa1e53b80N.exe
Files
-
8da7f889aa4d9d27810bafcfa1e53b80N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE