Behavioral task
behavioral1
Sample
b4bcef9b19a7eec9af511848ce7aa15b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b4bcef9b19a7eec9af511848ce7aa15b.exe
Resource
win10v2004-20240226-en
General
-
Target
b4bcef9b19a7eec9af511848ce7aa15b
-
Size
1.0MB
-
MD5
b4bcef9b19a7eec9af511848ce7aa15b
-
SHA1
e97177a4b1ac2477dc5793e3be656f1f38069075
-
SHA256
511ea531db1bc29f69ff7b5404c73ec6db6e636f7c417a03b77c1f12bc2141a8
-
SHA512
18d59a2322acde23f7f1af06cd03ecb69d5d22975c9bcdfdf762754b76c1c40a21b44529db6234d56927e410f11963802bcf4f1200fb7c0c814f6305c9a1d11f
-
SSDEEP
24576:h4s8HByhspDhFmHx0qUlwU/KLRe7+iT/vWW2m1z1wB0Vu5UZf30+4Y5uo2bC:h4s2BCspD3mHunlwU/KLReiu/vWWg0VZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4bcef9b19a7eec9af511848ce7aa15b
Files
-
b4bcef9b19a7eec9af511848ce7aa15b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE