Behavioral task
behavioral1
Sample
b7866dd21e54bcc07a111cd67f4558ad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7866dd21e54bcc07a111cd67f4558ad.exe
Resource
win10v2004-20240226-en
General
-
Target
b7866dd21e54bcc07a111cd67f4558ad
-
Size
29KB
-
MD5
b7866dd21e54bcc07a111cd67f4558ad
-
SHA1
6852687547de4f5cbea592e93611a6b8fe462b37
-
SHA256
3dd5d29e1e977b157babb587a533eef954ef7d65762c42467acb40ae46cf59af
-
SHA512
b3f440fa2b2013d1cc6dd5577db9d8887900a59af02a327bdda8997d5258e087070cf7ec39a4a6f20b9e70930fabe47b5f6aa346d630a4899ae6380588e2079d
-
SSDEEP
768:Ep7mK8AKKt17B3I3ws09RoHENUux2SCZxWK5sC1yZX+knbcuyD7U:siK8AKKtz3qws0NGYn4xW1Bnnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7866dd21e54bcc07a111cd67f4558ad
Files
-
b7866dd21e54bcc07a111cd67f4558ad.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE