Behavioral task
behavioral1
Sample
b84ab8dc33acc8d7ff60a3071de4af62.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b84ab8dc33acc8d7ff60a3071de4af62.exe
Resource
win10v2004-20240226-en
General
-
Target
b84ab8dc33acc8d7ff60a3071de4af62
-
Size
3.2MB
-
MD5
b84ab8dc33acc8d7ff60a3071de4af62
-
SHA1
7bd802e923d6a210d6cf999162da9a11fbd4bcdc
-
SHA256
f0f9026856e413d240b38f9c2e6ce8ca8ddd864e9829f1ae331c32a290864275
-
SHA512
33be32f2f6611623b741cab80f34126bf82d73ec35df1a0e45a08ea3a8340dbcfcea40d25d17ae051db02c5f8b83a0e579160b67db4f58fd6b68ffdcfcd09589
-
SSDEEP
98304:80w4AQcakcmzU581lcakc8JbJMyQcakcmzU581lcakcO:QbQdlmg587dlaJMdlmg587dlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b84ab8dc33acc8d7ff60a3071de4af62
Files
-
b84ab8dc33acc8d7ff60a3071de4af62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE