Behavioral task
behavioral1
Sample
fb72f2130f0bc545a4a6f13cf8f4ab28.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb72f2130f0bc545a4a6f13cf8f4ab28.exe
Resource
win10v2004-20231215-en
General
-
Target
fb72f2130f0bc545a4a6f13cf8f4ab28
-
Size
5.5MB
-
MD5
fb72f2130f0bc545a4a6f13cf8f4ab28
-
SHA1
51d0b027eda81d80f4786ebc4129dfa7a492db93
-
SHA256
d528dcfb4ae0510da3c0ff9b24fd0f7732aa2ab78d10a90e286d1c63f8e696bc
-
SHA512
a27073aa054876dc71943ea90c31d2c42498bc6cea3b61544d7a7bb291e580cf466d4d681ab302cc4683176a62162e168deb08ce13b39897e0a6e273baab4625
-
SSDEEP
49152:gY8WzlbF2q/CfPNMTBKK/4/GQGSOrJ8MPq28zKd2Nlay3vRmCFOGNj8mW4JH53RC:gbcgXNM9Pnmx135mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb72f2130f0bc545a4a6f13cf8f4ab28
Files
-
fb72f2130f0bc545a4a6f13cf8f4ab28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE