Behavioral task
behavioral1
Sample
b649beb88b953d5bbf95fdfeb6df7332.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b649beb88b953d5bbf95fdfeb6df7332.exe
Resource
win10v2004-20240226-en
General
-
Target
b649beb88b953d5bbf95fdfeb6df7332
-
Size
5.3MB
-
MD5
b649beb88b953d5bbf95fdfeb6df7332
-
SHA1
2f9c7127bb54f8de4fd0c0b8ba51e8b5a710bd60
-
SHA256
11eaaae9dab3f76d94a8f1991602ee66f3667149d9f8f1f799e724b8a0807d2f
-
SHA512
0f420c7c1887aa61d6bfbe2f628c76a85ccaef4c8a136b5b97d9487fe7b5abdae73ff2fbe2b2fba5ba1d8760e1a476b720eeb5504089ed3fc22c96b6e790dcfa
-
SSDEEP
98304:IFkSpivGitOHSof/nw4JsqNvMoYD3FwHOBwVARsD/AL0NgRPfyHHSof/nw4JsqNF:epiOQO/ffxsgUwuBwVAS/AL0j/ffxsgl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b649beb88b953d5bbf95fdfeb6df7332
Files
-
b649beb88b953d5bbf95fdfeb6df7332.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE