Behavioral task
behavioral1
Sample
b92851b36998c2ce79b945f093a7bbd5.exe
Resource
win7-20240221-en
General
-
Target
b92851b36998c2ce79b945f093a7bbd5
-
Size
341KB
-
MD5
b92851b36998c2ce79b945f093a7bbd5
-
SHA1
ab9253882633b223fe0b76612b1dbaf21d17d2f5
-
SHA256
2c53f0c1cc5ef897f2c4afea78d2d23c0c3944b8832f8daae53a0656ae129d73
-
SHA512
98b081d831dfa0a37d962aee5977c212ae50cee1309fc1a7f0047bea23200b7523f8ed6eac6e1b99843731f6dd62e992fa46a72768137173ccecc0063496a922
-
SSDEEP
6144:hGXeyFrHI2fHhEteTd2dgNddell/mmJfmTtJEDUR9jmF4GX9Cf4A:hk1HjBE4Td2dgNd+9kxKDcmH9U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b92851b36998c2ce79b945f093a7bbd5
Files
-
b92851b36998c2ce79b945f093a7bbd5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE