Behavioral task
behavioral1
Sample
b075eeae75766d536b5e7c8fe31af91f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b075eeae75766d536b5e7c8fe31af91f.exe
Resource
win10v2004-20231215-en
General
-
Target
b075eeae75766d536b5e7c8fe31af91f
-
Size
3.9MB
-
MD5
b075eeae75766d536b5e7c8fe31af91f
-
SHA1
a61d7581a59b9afda4f573de4eda5bb7d294bb83
-
SHA256
ef7b7d7aa6a37dbb3feb8953be57dc7f3bf44e28a8e12e5f6fb3fa7d8038a35e
-
SHA512
eae792f2ab9f4c56c0de21ddae20a11504978eb227cc8d745f21408fdcd3c2af5ab32b5269c29de2089426760e835c82ee407b7df91be8900a58f0048a818d27
-
SSDEEP
98304:/4pqDJwIkoTjCH6rufksF1USGGRUBxMrufksyUjS5Kjl9fcG/rufksF1USGGRUBb:pDXk2jCarmUSGGRAxMrfYS5Kh9UG/rmb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b075eeae75766d536b5e7c8fe31af91f
Files
-
b075eeae75766d536b5e7c8fe31af91f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE