Behavioral task
behavioral1
Sample
b69f60d44e5e11103e0c8d00bf2bf91e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b69f60d44e5e11103e0c8d00bf2bf91e.exe
Resource
win10v2004-20240226-en
General
-
Target
b69f60d44e5e11103e0c8d00bf2bf91e
-
Size
1.5MB
-
MD5
b69f60d44e5e11103e0c8d00bf2bf91e
-
SHA1
0a8b848e7c92b64f4e53c9a7070b38f43b990437
-
SHA256
1cdac8aad1462a371c3b77ecbd144f57e109cfd4a8fcbc0000d46192ff57f06c
-
SHA512
26615a607e6bd54a55d09086bd44d7aa8224efd00fa2c86474e748dae0646bdc96509bf4c3e6c55f3a2efaf859818330347b9d12319bcb1b182b8d76600f85df
-
SSDEEP
24576:su8MtXvk4uPAq5kE3BxwJ3ecjukL2Lfyy5dv5xFwgpYFPlB5+PcjukL2Y:t8Mtfkhj5HBmdecakLVy5dv5sgpkB5+a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b69f60d44e5e11103e0c8d00bf2bf91e
Files
-
b69f60d44e5e11103e0c8d00bf2bf91e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE