Behavioral task
behavioral1
Sample
b59eed1a7b3f3a0a048a3b0803d66703.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b59eed1a7b3f3a0a048a3b0803d66703.exe
Resource
win10v2004-20240226-en
General
-
Target
b59eed1a7b3f3a0a048a3b0803d66703
-
Size
133KB
-
MD5
b59eed1a7b3f3a0a048a3b0803d66703
-
SHA1
3838d57703f6e8468ca0398df8fe0d0f1b17b0b1
-
SHA256
8d98eff514572613f250b170c120da5d6b6e137b1323c55dc7de9aaaf1758978
-
SHA512
b69971796235a82ffd2a10204cf5c7c522aa4cce5c8ec6796cf328d77e54e82b98e46395d91c9d0190b020c7038e21c01dea60fcac89967b92adc2377686713f
-
SSDEEP
3072:6gPA3xx9zjj+Q9lWvgISo1gqeqoVfJFZfY/CSZi8sZJeBif2ZQ:6gPy5nKEl2gvo6TpfJLPSXOJ12ZQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b59eed1a7b3f3a0a048a3b0803d66703
Files
-
b59eed1a7b3f3a0a048a3b0803d66703.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE