Behavioral task
behavioral1
Sample
b8649847e681ec28d5ec7df3b0e12495.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8649847e681ec28d5ec7df3b0e12495.exe
Resource
win10v2004-20240226-en
General
-
Target
b8649847e681ec28d5ec7df3b0e12495
-
Size
3.9MB
-
MD5
b8649847e681ec28d5ec7df3b0e12495
-
SHA1
d7c183f27422e06f00acaab01b18fe48d6ababaa
-
SHA256
3f9d3ce7008b68be32640c027a120b7ead2d121ff8b77ab31abdef4ec6c7cdce
-
SHA512
c9bfd254969ecfc43f14116c9aaa5cba79987f0b76cebc9395fda5bfb5a1c472c27ab81269096a4712cd09f58bcbb946488e6c8630362f01db6101a2e7564d52
-
SSDEEP
98304:PssS7BXROY/A9zyULG+0dKz4DpvA9zyULG+Mq7yYfI26xXuhqPuCA9zyULG+0dKx:0F7ZROYozLq7ae4zLq7q7hd6duhKizL8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8649847e681ec28d5ec7df3b0e12495
Files
-
b8649847e681ec28d5ec7df3b0e12495.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE