Behavioral task
behavioral1
Sample
fbde66aa27d297ad6cf7fb651245efef.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fbde66aa27d297ad6cf7fb651245efef.exe
Resource
win10v2004-20231215-en
General
-
Target
fbde66aa27d297ad6cf7fb651245efef
-
Size
244KB
-
MD5
fbde66aa27d297ad6cf7fb651245efef
-
SHA1
ce7a2b6421e4e60cf7f6e26548fce70519d23923
-
SHA256
854b04193ac745fd099ef0b33e80ea9acec6e18b3479ab2fc4fb581182093b2e
-
SHA512
5fab609773e6e069823606164990e669ce5912a9731a35edf1010a5da6a2506efb65c2099fb77af2805ecebc6bbe11fb4cde5016c1034ac431174df323fbe582
-
SSDEEP
3072:vjr5ELbGnzi+aoJjr5ELbGnzi+aocdffXA0uQkvlI/409Jnp/21:BhXaKhXahN5ulI/Nr8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbde66aa27d297ad6cf7fb651245efef
Files
-
fbde66aa27d297ad6cf7fb651245efef.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE