Behavioral task
behavioral1
Sample
b70774cadcf38ef99e35b4c2b3da9146.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b70774cadcf38ef99e35b4c2b3da9146.exe
Resource
win10v2004-20240226-en
General
-
Target
b70774cadcf38ef99e35b4c2b3da9146
-
Size
145KB
-
MD5
b70774cadcf38ef99e35b4c2b3da9146
-
SHA1
7f8a168b543b6bd102fdf39dc2e3b88fb5baa387
-
SHA256
54987fc98fb198adb831feeb917f720976baf75c77ea9cbb0dab5a715ad75abf
-
SHA512
d7d2e177419e57b34ef054dce8f396b5b48fe994e31434c30dadd2d87957fb8efbb955a5d0d3a83aba9f3e2751570063fa1d9cbf7371d46cd5cc7365bbbb9200
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3uf0MzLiFFQJcn55i3KMcS60:hGyGuf0MPiEJD3Lrr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b70774cadcf38ef99e35b4c2b3da9146
Files
-
b70774cadcf38ef99e35b4c2b3da9146.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE