Behavioral task
behavioral1
Sample
b735025e77f5cf26ff6b5ca40c08aa19.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b735025e77f5cf26ff6b5ca40c08aa19.exe
Resource
win10v2004-20240226-en
General
-
Target
b735025e77f5cf26ff6b5ca40c08aa19
-
Size
133KB
-
MD5
b735025e77f5cf26ff6b5ca40c08aa19
-
SHA1
c55df3718856e187fa398b851d6158e4dae5e180
-
SHA256
4a5a1a71edf6a9ad071f7546df7718f327d9008c1bf79c6ba3c0fe53a3b0ac18
-
SHA512
027e3c2d21c3b2511e02520cb319fd3368a4704f48ed820e9e2b8dc6eb614615b2888de536a7f6b8b92bbb4ba5522781d0b5ede393742f480f8b920520213f2b
-
SSDEEP
3072:2XfjvMPsQgvxF68UOjCN2jX8Cb35c61Fnqy8zNqr7OfIlNsavQ:6jWsFa8CM/z5cUFg5q3EIQavQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b735025e77f5cf26ff6b5ca40c08aa19
Files
-
b735025e77f5cf26ff6b5ca40c08aa19.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE