Behavioral task
behavioral1
Sample
fb2521aae7e716fa96f62179e2cba318.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb2521aae7e716fa96f62179e2cba318.exe
Resource
win10v2004-20231215-en
General
-
Target
fb2521aae7e716fa96f62179e2cba318
-
Size
5.5MB
-
MD5
fb2521aae7e716fa96f62179e2cba318
-
SHA1
b885f1fc6c02d318e5e2fd01a243bfb1c1da1a41
-
SHA256
daa6c41a24f86ee8903c64ebf1a69e28b67dba622bbbc7ab834b22b148838f5d
-
SHA512
0b4c080058245399ce42a839bee05710079e9e4ead6e2c1d7efcafcc037435d9a09a9ed2ec857fe71473048282e985a6f7fc6d51d5557fe91e910e3621b7eaf1
-
SSDEEP
49152:oPrcA8Y3tuAJlen/qSwDhKoAqldATvVkNRSLQGrs7rNOmay3vRmCFOGNj8mW4JH6:avleADURqATuR9b35mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb2521aae7e716fa96f62179e2cba318
Files
-
fb2521aae7e716fa96f62179e2cba318.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE