Behavioral task
behavioral1
Sample
dbb00bbfa85d54d49de4f85afd0f6e21.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
dbb00bbfa85d54d49de4f85afd0f6e21.exe
Resource
win10v2004-20231215-en
General
-
Target
dbb00bbfa85d54d49de4f85afd0f6e21
-
Size
133KB
-
MD5
dbb00bbfa85d54d49de4f85afd0f6e21
-
SHA1
10683f74002425cc6a17bdecf9845e9eb1ba3a37
-
SHA256
d5cb95f36e148b745bea1bc45be165da1aee2198d84014c768e5d7859becb03d
-
SHA512
e60342a83256de5755543d04ce10d2c3b4b77edb2beac6befab2f9db1b63ff954ef3667076e95e10cdde1bc1d7b3fdef0bd9be75d6ca8caab12fc48475a064f7
-
SSDEEP
3072:nSp1VX3EctWxwTPJNFRb7EvHZbm6JBdIi3DsCoXKfMPHEhQ:OnEsowTBRu5bm6JB6iAfXK/Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbb00bbfa85d54d49de4f85afd0f6e21
Files
-
dbb00bbfa85d54d49de4f85afd0f6e21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE