Behavioral task
behavioral1
Sample
b900c3a89d21b2388d6cc849bfa60745.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b900c3a89d21b2388d6cc849bfa60745.exe
Resource
win10v2004-20240226-en
General
-
Target
b900c3a89d21b2388d6cc849bfa60745
-
Size
1003KB
-
MD5
b900c3a89d21b2388d6cc849bfa60745
-
SHA1
191d94c012565f9133076b4cfa01c5915dcd07f1
-
SHA256
8be0fdb10fdf2b75474213cacb7e381524ddb16ce3e203f6fb5425be8113ebe8
-
SHA512
c8ddc738c37ea20e27e83067aa2e1a74ec84a652aaf19c8e5880f00d3e56ee78accc46eaf00fe2d4218a70edb67b36914ce6af4b5f762152561313eb17aacef8
-
SSDEEP
24576:f1cbjzxB5ekM2KukS29Gse2u53odLJFmAb+7Zdfk6IOtuR:f1qxrenvS29GsvudodLJlb+7Zpk6IOtq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b900c3a89d21b2388d6cc849bfa60745
Files
-
b900c3a89d21b2388d6cc849bfa60745.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE