Behavioral task
behavioral1
Sample
b8dc96c929dd82e206665b3cc8ef97a1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8dc96c929dd82e206665b3cc8ef97a1.exe
Resource
win10v2004-20240226-en
General
-
Target
b8dc96c929dd82e206665b3cc8ef97a1
-
Size
1.6MB
-
MD5
b8dc96c929dd82e206665b3cc8ef97a1
-
SHA1
818742057ed0cfd9a8f30bf08c6409903b06e1d9
-
SHA256
c2421b47fc4050d0486553f2816df038019f4e525b58be0f8937a376c8bd75a2
-
SHA512
b9fd37d1220dbe2c9d5ac7130094d372c7734d4354b7ca898eb42a326a45fde8c9443d057989a9997ed9b72fd7ea4840defe6a6fdc382ed6fab9f1ce88727192
-
SSDEEP
49152:cx0py9HwcakLz03fnR8KyyLWU9Dcr7cakLz0O:cx3pwcakcvn+RyS+gr7cakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8dc96c929dd82e206665b3cc8ef97a1
Files
-
b8dc96c929dd82e206665b3cc8ef97a1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE