Behavioral task
behavioral1
Sample
b47080aef3c5e9717f2130c4b3165a2e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b47080aef3c5e9717f2130c4b3165a2e.exe
Resource
win10v2004-20240226-en
General
-
Target
b47080aef3c5e9717f2130c4b3165a2e
-
Size
302KB
-
MD5
b47080aef3c5e9717f2130c4b3165a2e
-
SHA1
e02da6b58f1c932c76dd581cb20604c43d7f7ddf
-
SHA256
6624e9c52a8591443f17f5e4c3c4618ec8ac967d4d9c9e3cc13d551f9eda969a
-
SHA512
2430ce9616203d82bbc35d32b3e17a33d4c99117dfa60c4df31676f0d341b6677f0c1c5373bd9692919e0d1dbf2b02e97c5e6f95bc3446a64a977ef2cef9a7e7
-
SSDEEP
6144:NKeiFe99ppiHAokFgJFe9VR984cedTpOc/ZsFCavCeEAmQ:Ye99Ukz984rT0cRylvvEAm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b47080aef3c5e9717f2130c4b3165a2e
Files
-
b47080aef3c5e9717f2130c4b3165a2e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE