Behavioral task
behavioral1
Sample
bin.exe
Resource
win11-20231215-en
General
-
Target
bin.exe
-
Size
193KB
-
MD5
035e24c0fa4b00d39ecc37f104032542
-
SHA1
f856d7a661aca38e5b3a4bebbda7c2050cd7cd8f
-
SHA256
b31bcbfdfef59292d6e1bad7d508b6b9b18fdf9271b7f58f1d8bd2c5dbd5c76a
-
SHA512
57c72000e04611f1edab104124cd47e79701bddab59649b65e56a9fcc5d87bd584bb1fea04ed392247e3ff765c0afc4e702577945afc7e568f02bd1d9ea00949
-
SSDEEP
6144:vmRHz4mnREj2t220kwt2XSaXGI81l0tUXohSmP:vm502820kY2vXGI81l0tUX/mP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bin.exe
Files
-
bin.exe.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE