Behavioral task
behavioral1
Sample
b4122fc297b8cd8aa4a46fb597aaa928.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4122fc297b8cd8aa4a46fb597aaa928.exe
Resource
win10v2004-20240226-en
General
-
Target
b4122fc297b8cd8aa4a46fb597aaa928
-
Size
5.1MB
-
MD5
b4122fc297b8cd8aa4a46fb597aaa928
-
SHA1
bdae9643c899dc1fcd88d7dc75d7a4e34231eee6
-
SHA256
76650acba52c08f96d14c8f29e5204acce86da73ee532181a568f60927559b4b
-
SHA512
6b03dfd118b6c1aebf153d7b69f79011ae9bebbc6a708d9e3e9104b512e0e0f56b1cb8ea19e70ee2b7f9c5ed2b632704dfb9cbadbff0538afd821e28633b7f72
-
SSDEEP
49152:M/0bdBuX/JN6Mv5rTaIwBMah1nYVy4ZU27ThydUhay368BRmodNm/ItWCbESXiR4:M/iKr7D8C3Fmd/sdXi1Znjdx9u33
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4122fc297b8cd8aa4a46fb597aaa928
Files
-
b4122fc297b8cd8aa4a46fb597aaa928.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE