Behavioral task
behavioral1
Sample
a76bc77bb183644042454d0117dc4f08.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a76bc77bb183644042454d0117dc4f08.exe
Resource
win10v2004-20240226-en
General
-
Target
a76bc77bb183644042454d0117dc4f08.bin
-
Size
133KB
-
MD5
a76bc77bb183644042454d0117dc4f08
-
SHA1
82da056152df0b6f5ef7b4ea3382a9b4cdb728b3
-
SHA256
6c87c93a5eca867f9e5994fb86d5e256e44afb7f814e3aa09bdc2776aabca016
-
SHA512
44bb5403f9bc1883aed159b51a647d16344310fb27eb39bf9d5af30955dd9ea99b2f231ce31273a9cb3237fc89272aa38515b071225cf29f056117818a080621
-
SSDEEP
3072:BfKZKxSo+vIPgmB0xoXOev53HDvTndf4+47cUZg0C+065oBQ:4ZKxSo+A4m/XLv5XDvTXAZh06+BQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a76bc77bb183644042454d0117dc4f08.bin
Files
-
a76bc77bb183644042454d0117dc4f08.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE