Behavioral task
behavioral1
Sample
b05f842ce4c5e3f8d8253199f13dde22.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b05f842ce4c5e3f8d8253199f13dde22.exe
Resource
win10v2004-20231215-en
General
-
Target
b05f842ce4c5e3f8d8253199f13dde22
-
Size
1.3MB
-
MD5
b05f842ce4c5e3f8d8253199f13dde22
-
SHA1
1d251fbea5f3239cc851cc88a440792c9c50b5ca
-
SHA256
a6cd6205a66197fd9dc15a3b9549d2ffb6bb0d9aec5f332744d7a50bddbb385d
-
SHA512
10c2d2ea96a7e31938ad9c09208a1b6cfe5ff930398290f9586d1aa81ec3ecfb42f03c14259633a391e072df4fc97e783ddb335b0eb4c9a76a9db6191b6af163
-
SSDEEP
24576:OcqsCmcj5bPZi2e83m45wdH1dc7MSoa/tBNd9MyrpeoqKaAe6wU9/9Us:OcqXBi2eamdH1dcIS1/tBNHMyrpehP6r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b05f842ce4c5e3f8d8253199f13dde22
Files
-
b05f842ce4c5e3f8d8253199f13dde22.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE