Behavioral task
behavioral1
Sample
b1c0c12cd4646c90514b40402cd41005aa09dcfd4dee222bc9aec3efe6d33cc1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b1c0c12cd4646c90514b40402cd41005aa09dcfd4dee222bc9aec3efe6d33cc1.exe
Resource
win10v2004-20230703-en
General
-
Target
b1c0c12cd4646c90514b40402cd41005aa09dcfd4dee222bc9aec3efe6d33cc1
-
Size
4.5MB
-
MD5
298976b9e88b6280ec0c5b2c8ef358dc
-
SHA1
634fe13eb6cef98f34ad760d094e868704696718
-
SHA256
b1c0c12cd4646c90514b40402cd41005aa09dcfd4dee222bc9aec3efe6d33cc1
-
SHA512
91f266e92f6157903b16291744cc31be1a6cad071ee174e02b5eac636e74c472b39222ef8995900b6369582e2fc78f458035adeef0097fa4faa3670cd22c7984
-
SSDEEP
98304:LT4500whHxZnKeMrbHtX1M1zGvjeCZ9ZpbDDMIgPLnRzeWQ9Sjt8MLynuofWpvnZ:34VwPNgXtlM1ePLDDLgPrlNFqMuRfya4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1c0c12cd4646c90514b40402cd41005aa09dcfd4dee222bc9aec3efe6d33cc1
Files
-
b1c0c12cd4646c90514b40402cd41005aa09dcfd4dee222bc9aec3efe6d33cc1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE