Behavioral task
behavioral1
Sample
b601c1dbed6ed50e586dd5aeea6fc00b.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
b601c1dbed6ed50e586dd5aeea6fc00b.exe
Resource
win10v2004-20230621-en
General
-
Target
b601c1dbed6ed50e586dd5aeea6fc00b.exe
-
Size
233KB
-
MD5
b601c1dbed6ed50e586dd5aeea6fc00b
-
SHA1
e66361b2a056eac9b23b4ee60187c153bae2f926
-
SHA256
b3102f0bb65a4d43ca46c22c008a21fd3ff06db976e94ceb2a322d805b9ddddd
-
SHA512
ea925f46a3cdb1022f455db136381cd57ba9cee419a45f42b978660e030cc669e887ac07d87ced1335082d1c9c30f1eb8d026cbd22bf8c9cdca9d7c26e7a107b
-
SSDEEP
6144:H2ynQQ4rk/OmGU+pq/Q5pimdzMpbOJKoS9:WycyGU+pfikuq0oS9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b601c1dbed6ed50e586dd5aeea6fc00b.exe
Files
-
b601c1dbed6ed50e586dd5aeea6fc00b.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE