Behavioral task
behavioral1
Sample
b84d168f1ee1711e0fd4808b93e26c91.exe
Resource
win7-20231215-en
General
-
Target
b84d168f1ee1711e0fd4808b93e26c91
-
Size
784KB
-
MD5
b84d168f1ee1711e0fd4808b93e26c91
-
SHA1
2e6f532d6667c7308ee6ea9d76d7af1308e90cf5
-
SHA256
390d73b2c4f935f05dc1015829cf47a7b767075a86d670ca6b88677a79e46708
-
SHA512
b64944a4a676498a8f5f8384227d7550d91dbd71b060af28b5475e795852673ceefa507cd6364b87c85e12cf69f962a7f32eabfb1d333034605e55797fa9c9f2
-
SSDEEP
24576:geb2g7d/LlJnN+EhBPoO9ygTFSlaYMNaM+WWC/8:gG2uBLHBPoO9QuT0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b84d168f1ee1711e0fd4808b93e26c91
Files
-
b84d168f1ee1711e0fd4808b93e26c91.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE