Behavioral task
behavioral1
Sample
b61b230c957a9bb8d29e2b91aa7e7373.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b61b230c957a9bb8d29e2b91aa7e7373.exe
Resource
win10v2004-20240226-en
General
-
Target
b61b230c957a9bb8d29e2b91aa7e7373
-
Size
133KB
-
MD5
b61b230c957a9bb8d29e2b91aa7e7373
-
SHA1
dd5d14f068923eb1f9f89d31e487b0f22d4d4ccd
-
SHA256
dc6865afbb1aab7509c77bb978c072739fb032e8d35a7bcbd9ea7a308dc71f55
-
SHA512
125852bff032427c08c88caaa2fc27d695fb1e7e55c9c23b378ebdb71f8861f8d0a17b9733bb18a0ef920abfd7575ae50bf0adbd73b7c3ae6d3bc45d7b31e86b
-
SSDEEP
3072:CDliORomJla90fQj/sdkX3hFkP7J0/8ITrwwU4BeYfhQ:CrRy0fQLJfmYoJ4BJhQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b61b230c957a9bb8d29e2b91aa7e7373
Files
-
b61b230c957a9bb8d29e2b91aa7e7373.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE