Behavioral task
behavioral1
Sample
b1c4bfc489ff2e0c8445fc076b1b2a70.exe
Resource
win7-20231215-en
General
-
Target
b1c4bfc489ff2e0c8445fc076b1b2a70
-
Size
2.3MB
-
MD5
b1c4bfc489ff2e0c8445fc076b1b2a70
-
SHA1
ae753cabd631055b2a30b90eced12f2f05fc8101
-
SHA256
776b1ba754bf137230a3dcdd3d4f26eb7a1d635d965a26c6b223824425998480
-
SHA512
05589c85dad8c4b2a0370a482c861432535d61c2ce8bf2955a528db1fb86974cca44d9f0287c212720a1baaf3ccae352eb090b9d8fe909486d825c2213742f08
-
SSDEEP
49152:WLOGWF8mTGTHIbh6clbBTK212WbeNP1Yf2hAqGe7ULi:WXW+7HIbxB23zPqI+eYi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1c4bfc489ff2e0c8445fc076b1b2a70
Files
-
b1c4bfc489ff2e0c8445fc076b1b2a70.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE