Behavioral task
behavioral1
Sample
b52241b516c509e477ae5e7ae7d23633.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b52241b516c509e477ae5e7ae7d23633.exe
Resource
win10v2004-20240226-en
General
-
Target
b52241b516c509e477ae5e7ae7d23633
-
Size
2.6MB
-
MD5
b52241b516c509e477ae5e7ae7d23633
-
SHA1
df6ecc62931ea4c091ba1234be3267b2b7341db5
-
SHA256
a4ff5e944bce46aa98940086ecee7db5393ea04aa3f28305534e357fad51deac
-
SHA512
8a4c09dbc766c84c15cdecb7c06ff8f1b629add8a319c0ec19be5b37c449daf95c7e8d852d6801737bee90128209c16fd0c3e0c48375d84e55d9424c6d2b4e05
-
SSDEEP
49152:eCAEQNXYgs2hNqkJnO+e605nTnzm3BBgc3QR57May3:GPOjHcARK3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b52241b516c509e477ae5e7ae7d23633
Files
-
b52241b516c509e477ae5e7ae7d23633.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE