Behavioral task
behavioral1
Sample
b665b1ef5e6a04739de8a2bbc3ca9236.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b665b1ef5e6a04739de8a2bbc3ca9236.exe
Resource
win10v2004-20240226-en
General
-
Target
b665b1ef5e6a04739de8a2bbc3ca9236
-
Size
3.2MB
-
MD5
b665b1ef5e6a04739de8a2bbc3ca9236
-
SHA1
88192f3e81cd50e95a3362c90939a164b04f5966
-
SHA256
f48e69b76f81da1a7d0b7fa4f4e09bc4572fd3138c0082a736846ba1406ba6f9
-
SHA512
392413c92d75e4b277290dff08733a892e7500229fa4260fc84dfcb1ba27d5d934c6f1753360990e915ba6f1382b6485cef7c0aa58e2a729d8a34b28ce6eeb84
-
SSDEEP
98304:7bPamZAuYcakcomv7X0D4baxa8cakcn3HWaf7WqOfcakcomv7X0D4baxa8cakcO:7u7uYdllYF/dlnm8IfdllYF/dlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b665b1ef5e6a04739de8a2bbc3ca9236
Files
-
b665b1ef5e6a04739de8a2bbc3ca9236.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE