Behavioral task
behavioral1
Sample
8c8f7860ab0a2752097b880bd2a9ed044ba8f5130fb5efdc119972eff3023169.exe
Resource
win7-20240903-en
General
-
Target
8c8f7860ab0a2752097b880bd2a9ed044ba8f5130fb5efdc119972eff3023169
-
Size
3.4MB
-
MD5
77251117162a753aa41d9bdcbee84ca8
-
SHA1
a08d4a7825700149cfbeaf11b8b6d0751ea896ea
-
SHA256
8c8f7860ab0a2752097b880bd2a9ed044ba8f5130fb5efdc119972eff3023169
-
SHA512
84d91d8682749f0cb95226dfdcdc2a0ab5bf6f95b83805fba425eb8c1bc1bd241430a7f8d0b95731a70e6134c00d6003a23acb1bbe1b1ce60f0708a440bcad29
-
SSDEEP
98304:s/UsyxdHMgScA3zR8hyaIe2cv1uz2DTUsP:s/UVdsP3zmhyW3v1qCUi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c8f7860ab0a2752097b880bd2a9ed044ba8f5130fb5efdc119972eff3023169
Files
-
8c8f7860ab0a2752097b880bd2a9ed044ba8f5130fb5efdc119972eff3023169.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE