Behavioral task
behavioral1
Sample
b72905eb27f304b082b826df37a7f297.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b72905eb27f304b082b826df37a7f297.exe
Resource
win10v2004-20240226-en
General
-
Target
b72905eb27f304b082b826df37a7f297
-
Size
302KB
-
MD5
b72905eb27f304b082b826df37a7f297
-
SHA1
bc535a2c721d2c6d98c3d65b8d0928ecd5eae27e
-
SHA256
cbc708e8352e5c96b6e9ded776db780a11d472a7bbe475ffcb2ad5832f5f2eae
-
SHA512
fdc7fcb469e1ad5425db92a9ab206f54b2dc8c6a2bc3510acefa5c60b906c7095f5e5fd9ca0a66a27bdd62d1273eeef849b192c461de98ae0ba06277b4b4669c
-
SSDEEP
6144:ogVIM4i0SdLBoAYOG66ldXLj3Ql89fJmQ:eTi0mLa3NlJTJm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72905eb27f304b082b826df37a7f297
Files
-
b72905eb27f304b082b826df37a7f297.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE