Behavioral task
behavioral1
Sample
b538d1b48b6a79b695756d28486b28d6.exe
Resource
win7-20240221-en
General
-
Target
b538d1b48b6a79b695756d28486b28d6
-
Size
784KB
-
MD5
b538d1b48b6a79b695756d28486b28d6
-
SHA1
b82d18e59f2dd07aedf154d3884b1d0021f5b0cf
-
SHA256
3caa55c0582a00cd3887b33021efdb6be7f6ab216679b1694bd373e2c55b0e0f
-
SHA512
78370f87a0d75b2fcab5a55baefe1eba55540e7462ede88ca7c269facc30f8e6410540d1185effb46dd796cd5b9a1512da9c36ea378eebe253f631ec4217c41f
-
SSDEEP
12288:Igz6wroHjzMD4fBqd+ha+UBW2RCHy8A5nkvDER7qiIc1eASahf9fsdBtIN0cx/ty:GjlU4CWS8AlAEpqFNAbV0ncUc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b538d1b48b6a79b695756d28486b28d6
Files
-
b538d1b48b6a79b695756d28486b28d6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE