Behavioral task
behavioral1
Sample
b500436a07b65265f17e854258f05b3c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b500436a07b65265f17e854258f05b3c.exe
Resource
win10v2004-20240226-en
General
-
Target
b500436a07b65265f17e854258f05b3c
-
Size
302KB
-
MD5
b500436a07b65265f17e854258f05b3c
-
SHA1
60102b925662089e3d4ae473693b9ce40b5cf15f
-
SHA256
d3c7c6f0c39ae480408397de5e9d54c89919fe895b159da067be0eebf01c39aa
-
SHA512
062050f56b45ce64d4c7b4074f3bc1c9dcd56d1e5add35bddec8160eb8c131fcb93e8abca5f2c59f899c328c055c37d31531cc4e21fdc7a4ccfdbd39a5f167b5
-
SSDEEP
6144:onUSqmx1K6hRaQzzamnHcpkbi8Vtrt+mtbyS4w+dmQ:on6GBh46+m8ibtztHB4Jdm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b500436a07b65265f17e854258f05b3c
Files
-
b500436a07b65265f17e854258f05b3c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE