Behavioral task
behavioral1
Sample
b79b7ef57a7801ff30ae78eada1fc153.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b79b7ef57a7801ff30ae78eada1fc153.exe
Resource
win10v2004-20240226-en
General
-
Target
b79b7ef57a7801ff30ae78eada1fc153
-
Size
353KB
-
MD5
b79b7ef57a7801ff30ae78eada1fc153
-
SHA1
184ae1e0279bde296dec12b64b8acde3fda513b7
-
SHA256
5c59b892ebcdb0ac9ec3660719a03316162bc01dc4399a0a5666e00848fbac0e
-
SHA512
2f0d29a767d03e43b19fe9576be91663e4a42dcae6cef13c41b94143e36aa31e91154faab3fc38b909b031f821265848145711458fa8154deadf5f78365ab80c
-
SSDEEP
6144:GekxSNFZXRKsczBFFai2clwzGxeuWYdxfsLPrPwo+:GDcxJc9UclwzGxlWYTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b79b7ef57a7801ff30ae78eada1fc153
Files
-
b79b7ef57a7801ff30ae78eada1fc153.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE