Behavioral task
behavioral1
Sample
8a8e2425cdd489fd49d461fd19f05a5ec5eaecf5924592e0aad5e8d5bae1423a.exe
Resource
win7-20240903-en
General
-
Target
8a8e2425cdd489fd49d461fd19f05a5ec5eaecf5924592e0aad5e8d5bae1423a
-
Size
189KB
-
MD5
aa647e65d4b5543eb170aac543c76e5c
-
SHA1
d1fa9f378617d24120c53c5d11a84280558a8a40
-
SHA256
8a8e2425cdd489fd49d461fd19f05a5ec5eaecf5924592e0aad5e8d5bae1423a
-
SHA512
8719296193facc9e580572402b27e3d870398954edcb6b06e60da3a05ddb707d5f63181dbac8ec4ae791ea0026d5b98b4b0f56d381b62d2215cf3b1ff386459d
-
SSDEEP
3072:ZGBT753Q+RgWgMlIx1ZiXjb6aEF6D0NM9voeLNZ2j8ChGt2:Y753RgWg4aAXjb6aEFfooeLNZxChG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a8e2425cdd489fd49d461fd19f05a5ec5eaecf5924592e0aad5e8d5bae1423a
Files
-
8a8e2425cdd489fd49d461fd19f05a5ec5eaecf5924592e0aad5e8d5bae1423a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE