Behavioral task
behavioral1
Sample
b1e644345711a51282829605b6ca6fc2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b1e644345711a51282829605b6ca6fc2.exe
Resource
win10v2004-20231215-en
General
-
Target
b1e644345711a51282829605b6ca6fc2
-
Size
10.2MB
-
MD5
b1e644345711a51282829605b6ca6fc2
-
SHA1
6caed9abc3f5fb309773575300b946de33743b73
-
SHA256
fe4cff91f9254fbea2018f376936b135e8b5ef4d3ddaa583b25f023616552ac2
-
SHA512
8006ba2a119f7dedc6e9afc97d50635759ff5b07172c219f26f46bd0c106fa3a0a16ab222ab2efaca0e755674c217fc48de899d3e9386e3bf86b3e8d4b4af23f
-
SSDEEP
98304:TzGIdIDFP0s0vO9d3VWaaeq3C6wM0IpHu82203VWaaeq3:vG5dX0cXae56wna0RXae
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1e644345711a51282829605b6ca6fc2
Files
-
b1e644345711a51282829605b6ca6fc2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE