Behavioral task
behavioral1
Sample
b769dfa29d03cff0470d6bd9e9a9f5fc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b769dfa29d03cff0470d6bd9e9a9f5fc.exe
Resource
win10v2004-20240226-en
General
-
Target
b769dfa29d03cff0470d6bd9e9a9f5fc
-
Size
1.5MB
-
MD5
b769dfa29d03cff0470d6bd9e9a9f5fc
-
SHA1
47ce34c873adca177e13f0b566b9bd1e1e551500
-
SHA256
f9aa51ed5df46b9b551ce9c7674f00ec00c32d1f24079e4aff131d8985d83816
-
SHA512
4c44b903b16b8cd27eb6d1e700f4862fa8fee67a8bb790d19fd625c946e264eed595562e55d7fe9b39e7a0e22a001b27bd5fecd0648b48be32031075bfa967d4
-
SSDEEP
24576:qTUmlLk5yp1JaocjukL2QZV4AYTZvDNFvIFgTj1vzI84cjukL2Y:WUmlLk5k1JaocakLh4JTdDNFvIFgTjNH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b769dfa29d03cff0470d6bd9e9a9f5fc
Files
-
b769dfa29d03cff0470d6bd9e9a9f5fc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE