Behavioral task
behavioral1
Sample
bb65fa8bc33045178f0d3c9e36ff14c1.exe
Resource
win7-20231215-en
General
-
Target
bb65fa8bc33045178f0d3c9e36ff14c1
-
Size
2.3MB
-
MD5
bb65fa8bc33045178f0d3c9e36ff14c1
-
SHA1
416336273cd1a4160cd8c00a7e13d615928aae3a
-
SHA256
72e76a0565d49129d78eea6f60323a4b8f6678cd6707f7684279b70fd05ff844
-
SHA512
7c92c2119d2c53c5cf223ce2c767d7198952ac88b0330d8ad25f2f7d96fee3c4e2d7b3fa920fe56795dcbad52649e524953f7d41ea9d62afe9bc1903e70da976
-
SSDEEP
49152:UoVBwt/LHO6a/Uvl5QnQVKaheOl8sNq7l5fySXCnX4s13oydJDX1RHckM6bvvK:Uo7wRajsvzQWR0h5fyeOXhOya6r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb65fa8bc33045178f0d3c9e36ff14c1
Files
-
bb65fa8bc33045178f0d3c9e36ff14c1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE