Behavioral task
behavioral1
Sample
b885b80adb574298f1965864109e0bc3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b885b80adb574298f1965864109e0bc3.exe
Resource
win10v2004-20231215-en
General
-
Target
b885b80adb574298f1965864109e0bc3
-
Size
10.3MB
-
MD5
b885b80adb574298f1965864109e0bc3
-
SHA1
0ad40a93f1c8f36799a550dc44cb83ad519cdecd
-
SHA256
5bed3a1f33d643ed5b7b31cb1b63c6b957ccd316249ae5aa53242b4632f2fa87
-
SHA512
cc45679d1bdbd6af6e20e181672048763dbacd01a7c257553e909ad907b3eeb2f9232d0ea4c0dc5fc9fbe3c66036f823385f3d3e07cbc5440206e4c18fc09c0d
-
SSDEEP
98304:nBuUDG7r35mCckFR+vicSRDXC86pg2j80GUuB35mCckFR+vicS6:BlG7F33FR+6c496W2j/VuT33FR+6cx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b885b80adb574298f1965864109e0bc3
Files
-
b885b80adb574298f1965864109e0bc3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE