Behavioral task
behavioral1
Sample
b76491f39ee2b1b9740e99fa43c91674.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b76491f39ee2b1b9740e99fa43c91674.exe
Resource
win10v2004-20240226-en
General
-
Target
b76491f39ee2b1b9740e99fa43c91674
-
Size
5.8MB
-
MD5
b76491f39ee2b1b9740e99fa43c91674
-
SHA1
f8c9321e7f8a58c82f55920e6f748be754de802f
-
SHA256
eba9d67ccc7f541a15cb6556fa76aeac65a17e3939059d3c8705740bfd7f184c
-
SHA512
7682499244f2a96bdc2f49b19c7d51dd44169de2f303ae5eda5358971bcf9c1c124d8babf5acb278e43748553b215518aac25065ba8cb0717e8b0f845a900aa7
-
SSDEEP
98304:csmBkh2OtbXgg3gnl/IVUs1jePsWtd4SuS7B7zZgg3gnl/IVUs1jePs:TvbtVgl/iBiPruS71gl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b76491f39ee2b1b9740e99fa43c91674
Files
-
b76491f39ee2b1b9740e99fa43c91674.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE