Behavioral task
behavioral1
Sample
b603bd588d4ed0af9cf75b6786f9bed1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b603bd588d4ed0af9cf75b6786f9bed1.exe
Resource
win10v2004-20240226-en
General
-
Target
b603bd588d4ed0af9cf75b6786f9bed1
-
Size
4KB
-
MD5
b603bd588d4ed0af9cf75b6786f9bed1
-
SHA1
0b816e1911ff761269bf5a55555ddb0f0a841506
-
SHA256
e6763a32feeb82d19bd067fde70c8f5ded096a4e2de4d8a99618e14ef0175242
-
SHA512
ad22767ecb7e6841ecbc3f8c5eedc5efc1c549db3581bd3882b76ecd9c976586377692573d6e7ee9f55130a23ddfab9b125e6b506bb9a650da2929c3fd9a396a
-
SSDEEP
48:6zBbxvtaX5fbp0tw+WSq2Upu8metqPrIXHimU7zdvP1vnz63Y8JelcGx:KBbxlaX5fmvWSKUpACLFzPlx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b603bd588d4ed0af9cf75b6786f9bed1
Files
-
b603bd588d4ed0af9cf75b6786f9bed1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE