Behavioral task
behavioral1
Sample
8f06278a6a83cbe0860b2f29d87823227a1003e5fe446a6c7c3f8caf0cb730e9.exe
Resource
win7-20240903-en
General
-
Target
8f06278a6a83cbe0860b2f29d87823227a1003e5fe446a6c7c3f8caf0cb730e9
-
Size
11.6MB
-
MD5
0063ab3e739967709f3d019df2468f36
-
SHA1
8c948a66214d05b34c866d947ba4c3a69ba320e6
-
SHA256
8f06278a6a83cbe0860b2f29d87823227a1003e5fe446a6c7c3f8caf0cb730e9
-
SHA512
fd0f1cab57eda969f6b2c664070d59007e1cb8061f955c1c21a026dc83cfae2b6a69d589e5fcfb5f303842e293cf6cbef6097359203c321afcbba27e4ae21343
-
SSDEEP
196608:27iwUEnj4IwQGjm0Hj04YOmiNIk1xNoCTCAfmkzmSXvDu9pm:2G3EncHQsj0XOmi1zLCAeInXS9p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f06278a6a83cbe0860b2f29d87823227a1003e5fe446a6c7c3f8caf0cb730e9
Files
-
8f06278a6a83cbe0860b2f29d87823227a1003e5fe446a6c7c3f8caf0cb730e9.exe windows:5 windows x86 arch:x86
2c9ab69870f93b8d422efe153fd2a3c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SendDlgItemMessageA
gdi32
CreatePenIndirect
winmm
waveOutReset
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragAcceptFiles
ole32
OleRun
oleaut32
VariantCopyInd
comctl32
ImageList_GetImageInfo
ws2_32
recvfrom
wldap32
ord29
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 581KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX2 Size: 11.6MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ