Behavioral task
behavioral1
Sample
b7e25644ecb8efb809013681dac53902.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7e25644ecb8efb809013681dac53902.exe
Resource
win10v2004-20240226-en
General
-
Target
b7e25644ecb8efb809013681dac53902
-
Size
133KB
-
MD5
b7e25644ecb8efb809013681dac53902
-
SHA1
01d3efe386cabfe9ab724abb5a72e2797ffd3320
-
SHA256
99aed37060786b760b2206d62ff8b5e7fcfbf03340566256eb55b28da17be764
-
SHA512
e058bfa6ce486f2626169218699277bc4611208a9060146c6b724beafbfdfd50e977b90b0fae4b394204dacdc9e01e82d7957af6e1109142f10be4c8beada973
-
SSDEEP
3072:XO7zpKFekVgJjM+5SfhRpnuCYmmDFXWNv6G0zxp61FYS2NmQJU6FTFkMQ:e7mviJX0Rm/s6G0zarr6FTWMQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7e25644ecb8efb809013681dac53902
Files
-
b7e25644ecb8efb809013681dac53902.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE