Behavioral task
behavioral1
Sample
b7b1c62ebb836babae1a180789d43d24.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7b1c62ebb836babae1a180789d43d24.exe
Resource
win10v2004-20240226-en
General
-
Target
b7b1c62ebb836babae1a180789d43d24
-
Size
57KB
-
MD5
b7b1c62ebb836babae1a180789d43d24
-
SHA1
d368acff043f4647eced675a1ef49bb48e31a76d
-
SHA256
f2fd5a63ad33822785023ef4d6244d98b03a10c5ba9f7366452b43a9240b45ef
-
SHA512
a78b529fa003c8da59cb6f1af5ecd51c8f310776856f70f0698040500e05c0ac1d25b888fce28d4a57a74c8b8fbf01b350c12c44aa3beb5493c6ee4ebf33e2ba
-
SSDEEP
768:hAHYjqn/CAtPXEKoLG9EIK1aDD0yz9PkMpEIifI4IXyuQNTPknjFCx9Fth6Q:c0ApXEKt9ytg9PmpmyuQNTBF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7b1c62ebb836babae1a180789d43d24
Files
-
b7b1c62ebb836babae1a180789d43d24.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE