Behavioral task
behavioral1
Sample
b67d47f8f116b5458416ef93dea146fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b67d47f8f116b5458416ef93dea146fe.exe
Resource
win10v2004-20240226-en
General
-
Target
b67d47f8f116b5458416ef93dea146fe
-
Size
363KB
-
MD5
b67d47f8f116b5458416ef93dea146fe
-
SHA1
2143e3557235bce4d3521d6ca5f1840cc81b1875
-
SHA256
166eaeff94262b69b86eb56714224ae86516f6b4b3efb6722ecbfac4e2b53c10
-
SHA512
26507933950172ef10ea25a6e4c105d390a17270b3e1d2b6f7c0226621d517e22c65f151fbaee5d5484b278be265c68bec09554ceeb714d9ff80ea125b676fb5
-
SSDEEP
6144:hGDHJ7NNBnG+FNf+4A+alWbIp8Fxa50yvctFZtZTCri6ZDSdHYOIy:hG7bRnyORGsxIH12HD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b67d47f8f116b5458416ef93dea146fe
Files
-
b67d47f8f116b5458416ef93dea146fe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE