Behavioral task
behavioral1
Sample
b8e11423c4b4e0427a30c416f0b929e0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8e11423c4b4e0427a30c416f0b929e0.exe
Resource
win10v2004-20240226-en
General
-
Target
b8e11423c4b4e0427a30c416f0b929e0
-
Size
1.8MB
-
MD5
b8e11423c4b4e0427a30c416f0b929e0
-
SHA1
51f6e5c764e8dd90da5d9187063e346e545d4ee8
-
SHA256
a60aefbfa6c21e46bab3bd55b5fcabc96e1184857f5f6fc36d74c240f787a086
-
SHA512
0599d234fc97d649e5bd4fd2b52d45fea7f22c760f96ad67ab108e4c827d29fa83164eddef96c6254b5a8193e04111c71313b12b784fbf0109c729f0deadbb30
-
SSDEEP
49152:hvvjxiI6OlukL6NGBWRY2RzIzSUwtsPRwbXXycuTmsLt:BFrlpmy+XzyShwKXycuhh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8e11423c4b4e0427a30c416f0b929e0
Files
-
b8e11423c4b4e0427a30c416f0b929e0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE