Behavioral task
behavioral1
Sample
b799d81f561a5bd60cf2c8e4056d6e39.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b799d81f561a5bd60cf2c8e4056d6e39.exe
Resource
win10v2004-20240226-en
General
-
Target
b799d81f561a5bd60cf2c8e4056d6e39
-
Size
1.3MB
-
MD5
b799d81f561a5bd60cf2c8e4056d6e39
-
SHA1
839dc7fcf47f1eac838eb7fe87bde8355f18b23d
-
SHA256
a5af5ab3d8af03a4974c7224fb2671e850fb0b514846fbd9f07cf430013bed78
-
SHA512
9c42c3619f873ddc6753b70c5dff1f7089be75c606ad3f800bf19e0d9c8c4e38737dedda4ccf931cc7f659b8a10e8320c269f5b503836f384a7ae5fc69d863b8
-
SSDEEP
24576:nA9ZA2YUmr7QR1SY0T9Xu8LBankBV8is3t00yqTLNvG:nA9C2wb5T9Xu9JUiTL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b799d81f561a5bd60cf2c8e4056d6e39
Files
-
b799d81f561a5bd60cf2c8e4056d6e39.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE