Behavioral task
behavioral1
Sample
bb73b45517ab8af27de6a508216b1697b357f0f3b8a0e840584171ba54aecf86.exe
Resource
win7-20230831-en
General
-
Target
bb73b45517ab8af27de6a508216b1697b357f0f3b8a0e840584171ba54aecf86
-
Size
4.9MB
-
MD5
a78142fd5e489b04e7bf0b1dd6574e05
-
SHA1
ffd7f2f74b9acf5a41d2bc3e1c69551892104b3e
-
SHA256
bb73b45517ab8af27de6a508216b1697b357f0f3b8a0e840584171ba54aecf86
-
SHA512
722d2e5d151bc6288c8473e82f91ad6abf9be59f291b999151eeb0a017dfa15dbc170c308c4f215af0df2b166b04f79b3da755dbe00bfd4d3401e7432598b83e
-
SSDEEP
98304:s8n92mhLimTzxkoGimLY0a5bju9qlZWElbJou8G3eIn5GldP6OB+VjRPrBwuRB:s893LimTzeoG1LLaDlbJj86eO5GlUjVx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb73b45517ab8af27de6a508216b1697b357f0f3b8a0e840584171ba54aecf86
Files
-
bb73b45517ab8af27de6a508216b1697b357f0f3b8a0e840584171ba54aecf86.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE