Behavioral task
behavioral1
Sample
b644d47929c4439d9a9c43171cda6323.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b644d47929c4439d9a9c43171cda6323.exe
Resource
win10v2004-20231215-en
General
-
Target
b644d47929c4439d9a9c43171cda6323
-
Size
2.6MB
-
MD5
b644d47929c4439d9a9c43171cda6323
-
SHA1
9c56d47ab2bc8220849de4fe710b9ab95153b5ce
-
SHA256
708cf5b8d16b251a512cd20cac51a305eed94bd62e3940874ef84c30a9a4cb27
-
SHA512
c5f0c12d9bf1802bae91f53ef461dcc58b798c8f1431fdd55f3eeadb205af7127d525cd4bb11879d9a93431079fa116e066edbfd555b8c6d31039602fe4f2bdf
-
SSDEEP
49152:NvW0ivYyoU60b1qEcDrEBNt71a2c6dANYqQ3UNjAay3:XIZqFB2jvqQ3UNjY3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b644d47929c4439d9a9c43171cda6323
Files
-
b644d47929c4439d9a9c43171cda6323.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE