Behavioral task
behavioral1
Sample
b5ac5f684c848c02ef555467110f574e.exe
Resource
win7-20240221-en
General
-
Target
b5ac5f684c848c02ef555467110f574e
-
Size
784KB
-
MD5
b5ac5f684c848c02ef555467110f574e
-
SHA1
367354b04f71ecdd2ae9a5ac20d46c71c9e91958
-
SHA256
b59f321b9cb6ca98711208d8ac8c33c0c5af1d6f3936ab39393b5097a3f6a798
-
SHA512
7a46374c838084e8e4fd2dd3c10371c03033e960233550ec121705c032179b2de5c1fef36a110a376d8626e0c4d2165c9ca66d48aa63788096818ff3382bcb4f
-
SSDEEP
12288:fdgW61TL7616z9AQJpIuCfKRereuY9Nq4zM2isGODeMz/JvdufrvPVtwIl+WZj6g:jGXA0fILPauE5MlsGOC8Zdu7t9IJllx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ac5f684c848c02ef555467110f574e
Files
-
b5ac5f684c848c02ef555467110f574e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE