Behavioral task
behavioral1
Sample
b7182e2bfe12b1ad42d6d9bea871743f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7182e2bfe12b1ad42d6d9bea871743f.exe
Resource
win10v2004-20240226-en
General
-
Target
b7182e2bfe12b1ad42d6d9bea871743f
-
Size
5.1MB
-
MD5
b7182e2bfe12b1ad42d6d9bea871743f
-
SHA1
1228ceb30a41322d188283601a16084939d0f699
-
SHA256
344082c0dd93ef09aa18f9a46e3f4b3a9aedcccd3c715aa15be79a28cd882ce2
-
SHA512
575501481b2c555a924d433bd1f7b509dc4506f34ddf3619bb879dc81ab0369be40d5c31511b81a82778f15281e288c2d36913c228aa6ddfbd1b5155c6048c3e
-
SSDEEP
98304:mwRnsTI1cImrSk7Q7HPX/F3cX3iiOzBeUFlP3:mB0pbPX/KniiiD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7182e2bfe12b1ad42d6d9bea871743f
Files
-
b7182e2bfe12b1ad42d6d9bea871743f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE