Behavioral task
behavioral1
Sample
b85164e55f6a669a9762ec72ce7ec646.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b85164e55f6a669a9762ec72ce7ec646.exe
Resource
win10v2004-20240226-en
General
-
Target
b85164e55f6a669a9762ec72ce7ec646
-
Size
16.5MB
-
MD5
b85164e55f6a669a9762ec72ce7ec646
-
SHA1
7727e6d6715e7c8c674bb4e71525fbbf9eb00bc7
-
SHA256
fabc0241c4bf278183733b7a3f10ebd8a2d7fb3b73328ec095d9dc9f6fe7b2c0
-
SHA512
b6f8b620a89e0b2a04250d55af1b9651ee5a1e9eee8fbec13b4a659901693494833c2d63d2645c6e34d9396e9ef38dafe5f7b1a2dd9c13ee2ad03a77874c6168
-
SSDEEP
12288:PHkVE/oStQE1kUZfz7ZijpQE1kUZfz7ZijpQE1kUZfz7ZijpQE1kUZfz7ZijpQES:cVKwwwwwwwwww777777777y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b85164e55f6a669a9762ec72ce7ec646
Files
-
b85164e55f6a669a9762ec72ce7ec646.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE