Behavioral task
behavioral1
Sample
b90888c1b4c990078b5d3486904569c3e86156dc15b3082fb41e67fd9225040d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b90888c1b4c990078b5d3486904569c3e86156dc15b3082fb41e67fd9225040d.exe
Resource
win10v2004-20230915-en
General
-
Target
b90888c1b4c990078b5d3486904569c3e86156dc15b3082fb41e67fd9225040d
-
Size
224KB
-
MD5
535af6a8bce3346dddd8c455c285b702
-
SHA1
d4ac9dba4d8b0d1c47c535d908da39bed6712d38
-
SHA256
b90888c1b4c990078b5d3486904569c3e86156dc15b3082fb41e67fd9225040d
-
SHA512
56ba6d9a41bb381b9cb283810f39c06189c5ebee63362da341921f19d97753f3734dbccea630a98d7324867904eda52718f458f34ff45c7461c16e721314d804
-
SSDEEP
6144:ORd5G5sr6mwDWK1AtgsCFOMPBtCfuuYh4T1eKS:0dWURw6QAnaPkuvhU1JS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b90888c1b4c990078b5d3486904569c3e86156dc15b3082fb41e67fd9225040d
Files
-
b90888c1b4c990078b5d3486904569c3e86156dc15b3082fb41e67fd9225040d.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE