Behavioral task
behavioral1
Sample
b8011580b67b3a2dedcb8b18acb5a1b0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b8011580b67b3a2dedcb8b18acb5a1b0.exe
Resource
win10v2004-20231222-en
General
-
Target
b8011580b67b3a2dedcb8b18acb5a1b0
-
Size
1.3MB
-
MD5
b8011580b67b3a2dedcb8b18acb5a1b0
-
SHA1
77d694ead0e74ff4d94bb46e8daf9f741e14f296
-
SHA256
2167f3877f6137d83e2a3b3d5d6b4226eee561663c20b867c7ed13abefc6b817
-
SHA512
6cad01c720bc648e473c32c8e8b3ab3b4b31be8dc5dadc4ddb3e19719b8e1575da7ba290d1edda320c29c4f5c7d8b33d2bd9fe2e9fdceeb722daaf283ff613e2
-
SSDEEP
24576:0EkHwC34TfhM9KJR72ok6ZG67bG3KzpY001wXdxFX31vG:axY5MgRFke7bGu901wtxR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8011580b67b3a2dedcb8b18acb5a1b0
Files
-
b8011580b67b3a2dedcb8b18acb5a1b0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE