Behavioral task
behavioral1
Sample
b5bd8957a6df57b798710a7069311463.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5bd8957a6df57b798710a7069311463.exe
Resource
win10v2004-20240226-en
General
-
Target
b5bd8957a6df57b798710a7069311463.bin
-
Size
7KB
-
MD5
b5bd8957a6df57b798710a7069311463
-
SHA1
8965c6c31875b3e11f244a964bad8b93ebf74502
-
SHA256
462a57d75fb76f04e176671025c51b8f33f7859d725d7026c5f34f0749671d8a
-
SHA512
9f01cfdc9ad79af82f1dde706ae0c2b1e50dabbdad394d97db20f21585c764b0fae338d3bf1e1a56c7fdb4589a88969ea50b40970e0a19454d2319eb645f5e00
-
SSDEEP
192:UtnNdeyX78Z+NX77OKWA7fGQmv63YxHrspNH2N/:Utn6yX78IJttaQE6S4pB2N/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5bd8957a6df57b798710a7069311463.bin
Files
-
b5bd8957a6df57b798710a7069311463.bin.exe windows:4 windows x86 arch:x86
2e44cfc71d5ba99dd6dedb0e2f43d741
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindResourceExA
user32
GetDlgItemInt
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE