Behavioral task
behavioral1
Sample
b9486b050dffa25e7c26d449ee56abd7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9486b050dffa25e7c26d449ee56abd7.exe
Resource
win10v2004-20240226-en
General
-
Target
b9486b050dffa25e7c26d449ee56abd7
-
Size
5KB
-
MD5
b9486b050dffa25e7c26d449ee56abd7
-
SHA1
4cd4dc57978b45aa64e956853aec96e78f0baf3e
-
SHA256
e39013d63f5fab4522cc8084cd17de55cd97b73bd746118fca2b63e8c4e75836
-
SHA512
2728f18862dbcfe97a7410f849065890350d34f948eb6139cf78eb4245c8eb9ac1304ca1b1e1d08ecba46f8727e99db6d7671b86d911a7ef9ae61d6b91005f6e
-
SSDEEP
96:86zs1kMISbGaY5EAH2wS6ye812PJwWv4W07b9psOkdEOPN+NVHOuzh:3szGaYAwS6ye8eJRe7js9COFYpL1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9486b050dffa25e7c26d449ee56abd7
Files
-
b9486b050dffa25e7c26d449ee56abd7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE