Behavioral task
behavioral1
Sample
b7ef5932d62768af40ab1cc43ce16a33.exe
Resource
win7-20240221-en
General
-
Target
b7ef5932d62768af40ab1cc43ce16a33
-
Size
316KB
-
MD5
b7ef5932d62768af40ab1cc43ce16a33
-
SHA1
66b26a621e59da28dc214a9aa97ca5718b7f6a8f
-
SHA256
0256df3f8557d557966af71134c9a1b00c66c07b0bda9e0c39506e74cc0dcddd
-
SHA512
28bf5321e8a9e0323e8b5c0e6d72247f1c2bc9a688e01f7252c815a9f3a37e73fbc07c60ad61ac080efc5dc08f71ca9fd15c82675185257b3db731ee693313af
-
SSDEEP
3072:n/fkx7Uiyd5F7zMo0iJE+0j2H/71Sq8PntE5rfkdxF3SR1UOO1GqThj8p:njr2XEUXgqN1tT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7ef5932d62768af40ab1cc43ce16a33
Files
-
b7ef5932d62768af40ab1cc43ce16a33.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE