Behavioral task
behavioral1
Sample
b93bc00aadad9316318df1404255e9c0.exe
Resource
win7-20231215-en
General
-
Target
b93bc00aadad9316318df1404255e9c0
-
Size
2.3MB
-
MD5
b93bc00aadad9316318df1404255e9c0
-
SHA1
3ed3beb061255107f5d772669747e09b4fb5ef7e
-
SHA256
8f594875c0eb3c59ed942de8f1e743e596456372409e1e26668ea00202c0f169
-
SHA512
0596dee946c647fe40f03b7c3d0e24546fc5e1b7509df38b303f39782d3e086cb0a4fc2a92cfc92ce3e3385723b4f7f019ff0e5078f3cc1795f5a85d87c84c3b
-
SSDEEP
49152:B/T4ZjdrGTGTllKkqak1VV17XoCa36TGSjwY9/OmklfjePqyqlMq:BrEBllDGV17bhT79/OmrP06q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b93bc00aadad9316318df1404255e9c0
Files
-
b93bc00aadad9316318df1404255e9c0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE