Behavioral task
behavioral1
Sample
b8b75ed43211475dcb0650d51a8a69e0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8b75ed43211475dcb0650d51a8a69e0.exe
Resource
win10v2004-20240226-en
General
-
Target
b8b75ed43211475dcb0650d51a8a69e0
-
Size
302KB
-
MD5
b8b75ed43211475dcb0650d51a8a69e0
-
SHA1
f8c434964615b43d1ca35f8425fc7962e9dd81f0
-
SHA256
be4062bf56495f6f872fc9e9d1a7f78da4f39232ff18df706cf140611e7f5886
-
SHA512
eebdc6b82af37e76a48f90f6581de198af1cd040d9fbf0d5b0fb8227f406ea120611a426891fe86d565d80936727738729138d863074e9aac3e00f755f78a9d7
-
SSDEEP
6144:KZWgN/C4Yg1htEsyqw2piWice3x92c4Oox1EmQ:KIcC5g+syq/fWTA4m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8b75ed43211475dcb0650d51a8a69e0
Files
-
b8b75ed43211475dcb0650d51a8a69e0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE