Behavioral task
behavioral1
Sample
b42fa5281b9cd5a45fe5f6351c2dbf99.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b42fa5281b9cd5a45fe5f6351c2dbf99.exe
Resource
win10v2004-20240226-en
General
-
Target
b42fa5281b9cd5a45fe5f6351c2dbf99
-
Size
1.5MB
-
MD5
b42fa5281b9cd5a45fe5f6351c2dbf99
-
SHA1
654d737f6e0ebfe07df1124c56f67cb15f1dbb58
-
SHA256
75f563c7815060992314cbf7eab8666ea40d7966c25f5e41dd2badb198a1d36a
-
SHA512
da6ed5bc69f1ab848bdfd98c84c5562aaa8e7760cd41aaefd6f8092da941e56e75879df99552f89345504bbdb5959dad16a705b7d0b515f4c996c856da241427
-
SSDEEP
24576:y5/XxHvM/S2gAEw94m/0avcjukL2f0wt5frvsMZ500VUbQbcjukL2Y:y5/X5v37k9z/0avcakLs0+QMZuwUUcaM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b42fa5281b9cd5a45fe5f6351c2dbf99
Files
-
b42fa5281b9cd5a45fe5f6351c2dbf99.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE