Behavioral task
behavioral1
Sample
b91f407e94f2662fa1e2d2a1bc99669d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b91f407e94f2662fa1e2d2a1bc99669d.exe
Resource
win10v2004-20240226-en
General
-
Target
b91f407e94f2662fa1e2d2a1bc99669d
-
Size
2.9MB
-
MD5
b91f407e94f2662fa1e2d2a1bc99669d
-
SHA1
c1881c558782981425970c7ffbc90d638c1d47b3
-
SHA256
a71ad069cc05e249227b57b3d2ba2673b8a1994cb67fbc52d2fb66399e217012
-
SHA512
38c667df189e43fa8482e5ab4577d18a2f20516a99c9956611363ac6c8357bf361585e8b29bd3181e8cf03c8aefc32f465010cd0bf593010dab9966c6a158689
-
SSDEEP
49152:7IXl5bRF+Wb2CS4azppb7gaphxAOJHdsjU6kLKO16dds4dHCIKsFr:MVt+53BXhtHdsjU6kLKOWdjdnKsFr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b91f407e94f2662fa1e2d2a1bc99669d
Files
-
b91f407e94f2662fa1e2d2a1bc99669d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE