Behavioral task
behavioral1
Sample
b4d30a564a5fa26d27ef760696ce2048.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b4d30a564a5fa26d27ef760696ce2048.exe
Resource
win10v2004-20240226-en
General
-
Target
b4d30a564a5fa26d27ef760696ce2048
-
Size
353KB
-
MD5
b4d30a564a5fa26d27ef760696ce2048
-
SHA1
60d8908e87a2aa050c95c3a1ec98cdbe50a01066
-
SHA256
c01d69e60c7c572263adc2c4e312c445f7a4013af9a77e90159b1417e4780562
-
SHA512
3e1000858458f3f9d159e3303ea7280d89e4ee242ea14b0bc5b5dc215930009a9ee589e0e9affb08ef3ca1e014baaf3130aeebcba71c4700c615b88d33d54701
-
SSDEEP
6144:gl8hIxY1o2nQltcR+aGSecUtaPDwJALvD8NqoPXYdxfsLPrPwo+:kTxY1o8QcZBBuALb8NqmXYTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4d30a564a5fa26d27ef760696ce2048
Files
-
b4d30a564a5fa26d27ef760696ce2048.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE