Behavioral task
behavioral1
Sample
b61ff4b4ab18d6d3cdfe9753438a0d73.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b61ff4b4ab18d6d3cdfe9753438a0d73.exe
Resource
win10v2004-20240226-en
General
-
Target
b61ff4b4ab18d6d3cdfe9753438a0d73
-
Size
2.8MB
-
MD5
b61ff4b4ab18d6d3cdfe9753438a0d73
-
SHA1
045721a26ad63c2d8384ba3cb28f1aadda3418e5
-
SHA256
5e1a7c96d95b7948ede9bfa1d281829bbd1554b5b04dc08b03406b76af0455c3
-
SHA512
f179726a1d77157fbc9ad7b3618a3859284573929b23dda9ee671a3bdecd556e15b735123c07dd8f221ee933b6c2aed699a59d1173f2baf72a185ba592108a2d
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91r:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0nv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b61ff4b4ab18d6d3cdfe9753438a0d73
Files
-
b61ff4b4ab18d6d3cdfe9753438a0d73.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE