Behavioral task
behavioral1
Sample
b55ce0b48c766b699a73056303c17a04.exe
Resource
win7-20240221-en
General
-
Target
b55ce0b48c766b699a73056303c17a04
-
Size
143KB
-
MD5
b55ce0b48c766b699a73056303c17a04
-
SHA1
d1ccea5a0e76a2951b7fc08f2f790b71f13b566c
-
SHA256
d47231b1dc03614724c819f3fe052abec0f0e1661c6efaee26491342e166a549
-
SHA512
53df785601166fc08d139501bf2ae6f339b982f12a2f88ebbc84c1d570e5449ef7e6705f80cc764a8d1f69c40127030cc3d5c0adebc551fb60db644f5323fc7f
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuItR8pLbtIBjOHCfOp2:9cm4FmowdHoS4BftapFApmp2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b55ce0b48c766b699a73056303c17a04
Files
-
b55ce0b48c766b699a73056303c17a04.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE