Behavioral task
behavioral1
Sample
b9fb1a8239f3ec737506cc46165dbb73.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9fb1a8239f3ec737506cc46165dbb73.exe
Resource
win10v2004-20240226-en
General
-
Target
b9fb1a8239f3ec737506cc46165dbb73
-
Size
1.3MB
-
MD5
b9fb1a8239f3ec737506cc46165dbb73
-
SHA1
01d49a89254c88ea73ab9e97c95747815aa8435c
-
SHA256
96f4026980c3e3d8a672516ab80a9eed3988d5f754b4bb6366391aa7bcb96e22
-
SHA512
0c206bff5dcb5a6c2a90f11e0b8cdd5d11d91991a5264b3f0956281fe462bd94a9e7875b34a5f5c07c96eb9a43853028f1633c7a5056bed61838e89a31488ccb
-
SSDEEP
24576:CVgWyWsVFERoekOegPm7qe7cVvFIJrzRc9nFzfUdFc8Dw/QplDQA1KEoY0/9kvG:CWW2epCqeoVvFcRc9FzsjJ7plDQA1dNo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9fb1a8239f3ec737506cc46165dbb73
Files
-
b9fb1a8239f3ec737506cc46165dbb73.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE