Behavioral task
behavioral1
Sample
b448e776255f217a7c3ec8cae74599dc2e2e412ca7f7ee408e28f260c25a9469.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b448e776255f217a7c3ec8cae74599dc2e2e412ca7f7ee408e28f260c25a9469.exe
Resource
win10v2004-20230915-en
General
-
Target
b448e776255f217a7c3ec8cae74599dc2e2e412ca7f7ee408e28f260c25a9469
-
Size
7.3MB
-
MD5
92e19398a0532c0ff4129a9b16bcd8ee
-
SHA1
99770626c9fc08b5ebcccfdf7493a816add5991c
-
SHA256
b448e776255f217a7c3ec8cae74599dc2e2e412ca7f7ee408e28f260c25a9469
-
SHA512
576c99fe23ff2e0f3bc2da6152e61a84f8f55f0f55fe6b85cdfaf1ec0392557e1ac2a3f060736bbdcee7f7a5c639bb6e3c159af91b6ce62a7d0b0e159ce233eb
-
SSDEEP
196608:dQR1CwSNy96O4bxypA+y+4qt/j2aVBd8apwxwWPewyMe2:j3J1yiy6+BSa2+WPzLe2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b448e776255f217a7c3ec8cae74599dc2e2e412ca7f7ee408e28f260c25a9469
Files
-
b448e776255f217a7c3ec8cae74599dc2e2e412ca7f7ee408e28f260c25a9469.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 65.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65.1MB - Virtual size: 65.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE