Behavioral task
behavioral1
Sample
8c08a3d57814a2e7fd36653a154582f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c08a3d57814a2e7fd36653a154582f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
8c08a3d57814a2e7fd36653a154582f0N.exe
-
Size
60KB
-
MD5
8c08a3d57814a2e7fd36653a154582f0
-
SHA1
1a9233c8d092eaf71e01accf934038cb9471a610
-
SHA256
6dd5896220d3ec4e28d5a7202e2863568d5585b25e2c07677ed6640fcf94470b
-
SHA512
c5c456ca4f17f537697d2f145f8ffe0ca2327b1122e062c7a2607e40ff194ed851158b763fd58fb4b7d848f64342e28b0ff84a8a64dd5e9578d23be978b09f26
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBaMYioGXOaiJfU:V7Zf/FAxTWoJJZENTBTYM2lta
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c08a3d57814a2e7fd36653a154582f0N.exe
Files
-
8c08a3d57814a2e7fd36653a154582f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE