Behavioral task
behavioral1
Sample
b570cffd5fc13fb9623e1829ce4dc82b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b570cffd5fc13fb9623e1829ce4dc82b.exe
Resource
win10v2004-20240226-en
General
-
Target
b570cffd5fc13fb9623e1829ce4dc82b
-
Size
982KB
-
MD5
b570cffd5fc13fb9623e1829ce4dc82b
-
SHA1
1cb495fcff1a8c197649ddcab7d757aa2fd7f849
-
SHA256
c68814feefc54636da8496a8db07f416d9067867c8fb22facc201ef0d69ff825
-
SHA512
5916980f9a2fd639c57ee5af54fa5e9eeae3c43b3a948d5908f047a5232cfd215350ff5ab7af9bb63cfc63170f85311d0e2aa04dbf8310b8554a2df6c252e273
-
SSDEEP
24576:OX72IVVJWTHTYkIkbkMX+x85HI35sayTehPJ6:OqIRW1HI6dYx6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b570cffd5fc13fb9623e1829ce4dc82b
Files
-
b570cffd5fc13fb9623e1829ce4dc82b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 980KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE