Behavioral task
behavioral1
Sample
fb62b1450808fbb344b7ed8751dd3b3d900adf0b4851c9da7b5165a3a65baf09.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fb62b1450808fbb344b7ed8751dd3b3d900adf0b4851c9da7b5165a3a65baf09.exe
Resource
win10v2004-20230824-en
General
-
Target
fb62b1450808fbb344b7ed8751dd3b3d900adf0b4851c9da7b5165a3a65baf09
-
Size
2.4MB
-
MD5
a369706ab239cca332e25309f8d0fd72
-
SHA1
1f4730b62ae05212084423a2c90d3165c5a083e9
-
SHA256
fb62b1450808fbb344b7ed8751dd3b3d900adf0b4851c9da7b5165a3a65baf09
-
SHA512
d8ddec5a4149a984357ce223b511c17fcbafef220609c20341cac7c586ba4e65574bd67cfc073b1b458873510865841ecb97e397579f3416a2d62f780a091620
-
SSDEEP
49152:Wp9GAntifCyTBp3NYc7ifdIwLpJCxzS6qRS63dn9RTeleqJR9dI:oQfLp9YUifuAQySA9ErH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb62b1450808fbb344b7ed8751dd3b3d900adf0b4851c9da7b5165a3a65baf09
Files
-
fb62b1450808fbb344b7ed8751dd3b3d900adf0b4851c9da7b5165a3a65baf09.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE