Behavioral task
behavioral1
Sample
8d88e454cd3bbd48159147986a03f94aef22f60af1778a45efcc8635a61aaedaN.exe
Resource
win7-20241010-en
General
-
Target
8d88e454cd3bbd48159147986a03f94aef22f60af1778a45efcc8635a61aaedaN.exe
-
Size
1.8MB
-
MD5
8b54f23dd2e918dd70f190524d802c80
-
SHA1
650e1c15ed371ced0cbc0d8dd31c5455040e3331
-
SHA256
8d88e454cd3bbd48159147986a03f94aef22f60af1778a45efcc8635a61aaeda
-
SHA512
4638747d71077a9cbb3b350f9b397dfdf76eda8a53606b7c4c62326c3d89625ee8fc3ea1a3b8f71b2a604a21506a05b33d7feb577e57a9efa59c2e239abe9bea
-
SSDEEP
49152:YXsY+0JDQt/YK1Mj0eITzTR9K8099+h9vNe2h/KP:YZ+SDQJYKSjsTfR9Z0f09vNHhCP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d88e454cd3bbd48159147986a03f94aef22f60af1778a45efcc8635a61aaedaN.exe
Files
-
8d88e454cd3bbd48159147986a03f94aef22f60af1778a45efcc8635a61aaedaN.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reltc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE