Behavioral task
behavioral1
Sample
b65bb17050c95f0e8fd40594793b5a66.exe
Resource
win7-20240220-en
General
-
Target
b65bb17050c95f0e8fd40594793b5a66
-
Size
784KB
-
MD5
b65bb17050c95f0e8fd40594793b5a66
-
SHA1
b87b5a144d7e66e73dddf8ec246f5789052525df
-
SHA256
f00a31bc5b1bba267b6068ffb73af6527c4235973e69245e03553aac061f5309
-
SHA512
477490b96c4f286df0e87dbb69a9b04214d6f0e7b1f722674adfd7949f2628faaec6155c21546ce4a9030e7c999585ca167c9663a3f119ac3d6baae1e40019f5
-
SSDEEP
12288:5InsDXulJmJIMZlxHSdttcM61REAvypvVExksBdq7Jr5bR7W4F/3Bk7F/E/Gj4e:5VdxyVAs+xIRwe/3Bk7FM/Gj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b65bb17050c95f0e8fd40594793b5a66
Files
-
b65bb17050c95f0e8fd40594793b5a66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE