Behavioral task
behavioral1
Sample
b1e8f194a63ecd0951234617f801ea80.exe
Resource
win7-20231129-en
General
-
Target
b1e8f194a63ecd0951234617f801ea80
-
Size
1.5MB
-
MD5
b1e8f194a63ecd0951234617f801ea80
-
SHA1
fafc7f56a53f6e099d1d9222c33a4683221e0f26
-
SHA256
75aa4e4f38516d779bd0c6306894b7bdda633d4c30f1c5ab9e1400f4b4b7c993
-
SHA512
23db3cce33a944dcda48fcd6ffef8fffba38bcc5ba649cbcf5797a2dc2c3d1898b7a8501ce54926d135f69de30166e80b3864adcb60165004693cab19bbcbcbe
-
SSDEEP
24576:Us7OxR8CawbBD74MPBcG8mjesFreHRWv9WmYP2QFb5nm4AQUypZ:CxR8abBD5PRjewr9vwJjFb5FZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1e8f194a63ecd0951234617f801ea80
Files
-
b1e8f194a63ecd0951234617f801ea80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE