Behavioral task
behavioral1
Sample
b6c4a7711e5f9ca06ed14f13eac37474.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6c4a7711e5f9ca06ed14f13eac37474.exe
Resource
win10v2004-20240226-en
General
-
Target
b6c4a7711e5f9ca06ed14f13eac37474
-
Size
133KB
-
MD5
b6c4a7711e5f9ca06ed14f13eac37474
-
SHA1
b43b1fcdf0a104af2ffba5ececff548bd2e7542c
-
SHA256
c82c2290bad82370fe9a8c6cb04241fdaf2654b7b708bae64de1e77078c10214
-
SHA512
dff68dc5bad3a99fc01b3b27df4631e679f295f6b342e8d1aad724bd66fdfc18f18a173af970d8f92a11e2ada27273f16fa0ebe8069c03a7632816a29a2bcd73
-
SSDEEP
3072:25diCBRHAIAbYhYunGdXof718jhBvHAJUQ:zCBlvhYuBGBvg+Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6c4a7711e5f9ca06ed14f13eac37474
Files
-
b6c4a7711e5f9ca06ed14f13eac37474.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE