Behavioral task
behavioral1
Sample
b6f7ae48d11ae008d3a4276d4c1033f9.exe
Resource
win7-20240221-en
General
-
Target
b6f7ae48d11ae008d3a4276d4c1033f9
-
Size
1.5MB
-
MD5
b6f7ae48d11ae008d3a4276d4c1033f9
-
SHA1
210ee144ab1ebf42f54fa3d981fe08925d905928
-
SHA256
8cd881fd0cfc51bc01e7103f4655b34cda0be96ec3aab27376c6a40f7359eb34
-
SHA512
8229caaa9688ca07b31e67fc6b15c938e1f3a7e57a0d4642c2dee2c37a3ab027accd7e88661e18af3c3e1c29b31739084806ff1d35724eff5b04095839ffae4e
-
SSDEEP
24576:wJHin8xE6IPXfSlLC498aDC8b9LrbV4dE4LgCpGJx4Tpslp:yin0EFPfcC4uP8FbVYDkCpGJG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6f7ae48d11ae008d3a4276d4c1033f9
Files
-
b6f7ae48d11ae008d3a4276d4c1033f9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE