Behavioral task
behavioral1
Sample
b47f3873c73cb40a6dd4e304d87641ee.exe
Resource
win7-20240221-en
General
-
Target
b47f3873c73cb40a6dd4e304d87641ee
-
Size
1.5MB
-
MD5
b47f3873c73cb40a6dd4e304d87641ee
-
SHA1
45b4ff3d08d4e18ae24d1bb7d108a20aef9ebc3e
-
SHA256
5fb393ff6f4aac4e8a99eba37e1a329d89fd3d967757b7216c883ada3704ec95
-
SHA512
e74f78e7dab3c081f4a66f6033a9d163ca76563212ebbf7de3e2964eb8916412b1dde3d20a720fa0b29799f9b0e90c04f82f6efc7c1e79aa0c9cd981c01c59b0
-
SSDEEP
24576:0dDKpclTVGxAu8LR/KTNSzr3QfSZQMmyZO3vkfGk1M3TcWvW:0dDKYGGTLR/K4PmSZQdswv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b47f3873c73cb40a6dd4e304d87641ee
Files
-
b47f3873c73cb40a6dd4e304d87641ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE