Behavioral task
behavioral1
Sample
b74665189767fd075539aa508522e1f0.exe
Resource
win7-20240221-en
General
-
Target
b74665189767fd075539aa508522e1f0
-
Size
53KB
-
MD5
b74665189767fd075539aa508522e1f0
-
SHA1
88fb67faf888ab0340290e2ce296db11e48736e6
-
SHA256
f80190b335dab480635e3ac13f841dda6aa198ede09d0db790ae76b7bf93c40a
-
SHA512
80a787cd45d0bc03e4b0d07d1d7ad7b9ab6dba5f310baed8d70c950861743872f7564d08eee0cfd59614205638b473c7e62f2bdb09d1b76e503c4d1b16ae5d3d
-
SSDEEP
768:U4HoXT31+7ZlfnROlau4EsI5lNCHvALvCOW3XkGnSjwYPmSJ8b9wS6LYu:UYm31+bRtEd5Iv0yEBjwYPmwm6LY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b74665189767fd075539aa508522e1f0
Files
-
b74665189767fd075539aa508522e1f0.exe windows:4 windows x86 arch:x86
1ecbd6ae2f1dcabbf66dc128bf44609a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeW
DisconnectNamedPipe
ExpandEnvironmentStringsW
EnumDateFormatsExW
ExpandEnvironmentStringsW
FindNextFileW
urlmon
MkParseDisplayNameEx
FindMediaType
WriteHitLogging
CreateURLMoniker
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE