Behavioral task
behavioral1
Sample
26bb9e4f6104478681c153a2e734e23e7fc8803735c22d045e9b61aa8c422aee.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
26bb9e4f6104478681c153a2e734e23e7fc8803735c22d045e9b61aa8c422aee.exe
Resource
win10v2004-20230831-en
General
-
Target
26bb9e4f6104478681c153a2e734e23e7fc8803735c22d045e9b61aa8c422aee
-
Size
346KB
-
MD5
b8ef706e20978a3bb4662f0caa62e839
-
SHA1
0c25ffa8ee5f330fd6ed5748cc296f152195fe18
-
SHA256
26bb9e4f6104478681c153a2e734e23e7fc8803735c22d045e9b61aa8c422aee
-
SHA512
907d110182045242465dae6a54c5129699a4edf58c931b79128f469ed82a87454aef0354b79c6606063f6f9b1fb29e4aac54c9f9884f78a8f191815314bd67cb
-
SSDEEP
6144:+Rk9NrU+9DUx99SD9j99i99CxF3cKWTj/p9a9jisJuqACm6hdoSF:gk9Nr59DUx99SD9j99i99CxF3cKWTj/c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26bb9e4f6104478681c153a2e734e23e7fc8803735c22d045e9b61aa8c422aee
Files
-
26bb9e4f6104478681c153a2e734e23e7fc8803735c22d045e9b61aa8c422aee.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 341KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE