Behavioral task
behavioral1
Sample
b5fa100616fd2f923e4f04d280dd89d8.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b5fa100616fd2f923e4f04d280dd89d8.exe
Resource
win10v2004-20240226-en
General
-
Target
b5fa100616fd2f923e4f04d280dd89d8
-
Size
7.8MB
-
MD5
b5fa100616fd2f923e4f04d280dd89d8
-
SHA1
463e669870afbdf9db121e762d5211745bf10eda
-
SHA256
b35b41be3b04cf4820ccd4255194b541eab4270af8194c526d3ebcea18e48357
-
SHA512
77d23bb3c7e37cb05fd517d7be3e14d9eeda34dba0e22acb117f0ad1a1ea908c2385b0c59fd02788ae3b503c9b9c370e97b2770772cec70566a16e6a0fe769b0
-
SSDEEP
196608:YVvNxh7FkNqKcrIh7FkNqKNA2T0h7FkNqKcrIh7FkNqKAswEBh7FkNqKcrIh7Fka:YlV7upSq7updu7upSq7upUET7upSq7ua
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5fa100616fd2f923e4f04d280dd89d8
Files
-
b5fa100616fd2f923e4f04d280dd89d8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE