Behavioral task
behavioral1
Sample
b554e06ffa6f92090afb6d8349b225b9.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b554e06ffa6f92090afb6d8349b225b9.exe
Resource
win10v2004-20240226-en
General
-
Target
b554e06ffa6f92090afb6d8349b225b9
-
Size
133KB
-
MD5
b554e06ffa6f92090afb6d8349b225b9
-
SHA1
4aed4ba2b79524b40f6e750182b8e03bf713c9a6
-
SHA256
a25e8c680ed35c8316befb3f6ab8a23b3e6fadcf010d088febd6ddcde557c3a5
-
SHA512
3e78ee0f2a9d88791cb9744709442f4a6c9b75dbe14a22c3efa65c1a4c392ff19eee36b4094d472e9d9e7f172182dd6400427cdaaaf4a7a8b9b0f63aca33904d
-
SSDEEP
3072:Ad/P+ET9bbpd4a9GwiwLXotqtg+keAMLy9yBCd7L2zNzl1Q:iV19XfLQL+43AWGJz/Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b554e06ffa6f92090afb6d8349b225b9
Files
-
b554e06ffa6f92090afb6d8349b225b9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE