Behavioral task
behavioral1
Sample
b6930f64d41b3dbe9b72058f43dcc4ba.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b6930f64d41b3dbe9b72058f43dcc4ba.exe
Resource
win10v2004-20240226-en
General
-
Target
b6930f64d41b3dbe9b72058f43dcc4ba
-
Size
325KB
-
MD5
b6930f64d41b3dbe9b72058f43dcc4ba
-
SHA1
788e6857e5fe26ef50f605398b551ebbf73c1652
-
SHA256
8cc38795abb4c26226ca3108da321002210bd6f541c6860846104a8eb13b9dc4
-
SHA512
fc4b578db07006566225a245f8867535a1e7c3bb52f6cd377cddd4de35f12fc941624b23eb09eaae5935c2630f533da55f59bbca86a0df1806acf3b2fb935e47
-
SSDEEP
3072:jTGaHbkzCagTmZQ0BqtaKyidTBo4WgliKriqIcNqQNtLSBjvy3x9X+5out:HnweGqtdpU4WORdgQNtWBjAX+5oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6930f64d41b3dbe9b72058f43dcc4ba
Files
-
b6930f64d41b3dbe9b72058f43dcc4ba.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE