Behavioral task
behavioral1
Sample
b86d043947c349134e9b658482e94645.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b86d043947c349134e9b658482e94645.exe
Resource
win10v2004-20240226-en
General
-
Target
b86d043947c349134e9b658482e94645
-
Size
133KB
-
MD5
b86d043947c349134e9b658482e94645
-
SHA1
1f4db1309f86fa28a8437c3b65f281e667b8b464
-
SHA256
2d201d47a9783573c23526386e6f4534d3bcf0f78e1d23f23ba9e4153f1bd2a5
-
SHA512
865501d8c5371e4e3a374a37998888b880440f0b821e78e28c728071643b9b3421b5c7f1905ad351c6e1bcbe1b2072f776052963de3fcca719e9e4c9ffb7206a
-
SSDEEP
3072:28W0bdLCeVC59GZQeVS48WtZq9cB1xQnAS6EnzSGNvtpMOulOELR3Wh93+Q:28WkQjEVSD8Z9IAZE1JtZu9tAwQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b86d043947c349134e9b658482e94645
Files
-
b86d043947c349134e9b658482e94645.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE