Behavioral task
behavioral1
Sample
b5b5b482c8c7c19d4126786edb85ca85.exe
Resource
win7-20231129-en
General
-
Target
b5b5b482c8c7c19d4126786edb85ca85
-
Size
784KB
-
MD5
b5b5b482c8c7c19d4126786edb85ca85
-
SHA1
c6efd4e9f9133afe3fd073c0e1cc46bede56dfa8
-
SHA256
df6fdd21c735e15516e809b73efc5f446e3d0b8108043c2e1a624fb18849ea2e
-
SHA512
373e71f0b33db3fc820d26e4be5ec8428f6a8615077273a33dafda59aff2b4aa05a01ffbb943f1963d0e7ec036b5d0d1194eaa89b7d17511accdf3ec203050d6
-
SSDEEP
24576:sOnoiZDcwmR9vvTRjhEOhF9pkv+QubwiQiv2jgrNDEv0UA8l:NDcj/4WDkv+QuT7v2aEBA8l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5b5b482c8c7c19d4126786edb85ca85
Files
-
b5b5b482c8c7c19d4126786edb85ca85.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE