Behavioral task
behavioral1
Sample
fbb3239a4f2a3f83321e91ee5975af5c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fbb3239a4f2a3f83321e91ee5975af5c.exe
Resource
win10v2004-20231215-en
General
-
Target
fbb3239a4f2a3f83321e91ee5975af5c
-
Size
74KB
-
MD5
fbb3239a4f2a3f83321e91ee5975af5c
-
SHA1
50939b5d7d09a3ea52999b0556ab5d78891be2ca
-
SHA256
e74e3b9559467f276bb9fee8eacb3c678d323129e046f0c917d4b37f9dd43615
-
SHA512
8da2ffc9040ce5b520d0fcc4a34951e39d058c72d91b9bcddb8a23ea2ae2454b676cdce6578cbfb5157d408b78ec87a5efaebed3c25f6f9075248e0ee24e7f62
-
SSDEEP
1536:2RlOw5A1fQr98rHnHcTLSE4qczJ02Zobrj2/88vImC8rHTxsCwGmS/4GwpN1F:2ff5cfbzoLsLOr/jy88x/HTxsC6Sk1F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbb3239a4f2a3f83321e91ee5975af5c
Files
-
fbb3239a4f2a3f83321e91ee5975af5c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE