Behavioral task
behavioral1
Sample
b7e52efc93143b42312039cede8feac8.exe
Resource
win7-20240215-en
General
-
Target
b7e52efc93143b42312039cede8feac8
-
Size
784KB
-
MD5
b7e52efc93143b42312039cede8feac8
-
SHA1
9ef5d87a12f8631d2a475cf57a1e3da7b48f0c61
-
SHA256
b2d547bf5bdb3fad3dab7e523cf739f1ec7f0d86de93f51765bb03ef5bf30ff8
-
SHA512
a3a0446780b31016e75ecf295bf0cc6a6cf68eb747411552bfbe74dbe7eebba837e7c3fefca5ff55634a8c60c656c1e0695b39b2d09279d72b51616a4833fb12
-
SSDEEP
24576:/4C/YiokSIwnVi1TTzy6KMj4p+0vpAoFD:/4MYiZXUVi1SFUIptF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7e52efc93143b42312039cede8feac8
Files
-
b7e52efc93143b42312039cede8feac8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE