Behavioral task
behavioral1
Sample
b4edb38d0c4b66acc0378f86a05b7f21.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4edb38d0c4b66acc0378f86a05b7f21.exe
Resource
win10v2004-20240226-en
General
-
Target
b4edb38d0c4b66acc0378f86a05b7f21
-
Size
56KB
-
MD5
b4edb38d0c4b66acc0378f86a05b7f21
-
SHA1
e40e4bf71ca343b1849e151d4d53c8e3dc9804eb
-
SHA256
20c9b1a5a0c769d1af97df9728e0de8fe6b2f5012edebd53841edb5b901b3237
-
SHA512
5ad7729b7a6f36101f8148ca420f6fbb3cd84a8076dcf327da7095d445b1fb2179b4925f28131ff9fe82ce98ec169cbfe272272d2293a9759fd525709cf1773a
-
SSDEEP
768:H075YqqedSJluMkE5aIjg1W0MW+fhA1S:H3lgSl/dGMWQAs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4edb38d0c4b66acc0378f86a05b7f21
Files
-
b4edb38d0c4b66acc0378f86a05b7f21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE