Behavioral task
behavioral1
Sample
b40201393020af325e0997f71193a70e6bb331c3343595f9f051461c94662c31.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b40201393020af325e0997f71193a70e6bb331c3343595f9f051461c94662c31.exe
Resource
win10v2004-20230824-en
General
-
Target
b40201393020af325e0997f71193a70e6bb331c3343595f9f051461c94662c31
-
Size
10.0MB
-
MD5
13e260144b770e34a7b4573401ca8440
-
SHA1
1810c75de808b08ce3823ef51d6b3865654b6fc6
-
SHA256
b40201393020af325e0997f71193a70e6bb331c3343595f9f051461c94662c31
-
SHA512
6eee48f711ba416a57b3b041d9e6f2d64166d734a70cf2a440604e62a5bb1562c5f50d3dac944bee2b6db58376ca148ec119147a82587e6b3b84db1241dbead7
-
SSDEEP
196608:SKR98IZZP1qL15kHpQsNRmlmr5wX0JalvLi782sWl+jFC7dTq/Abj7+oc1LR4:/Rxn1qL1GHpQs9wkKi7ZjRMAKoU4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b40201393020af325e0997f71193a70e6bb331c3343595f9f051461c94662c31
Files
-
b40201393020af325e0997f71193a70e6bb331c3343595f9f051461c94662c31.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23.7MB - Virtual size: 23.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE