Behavioral task
behavioral1
Sample
b967ee7fe37bef5492b1f6a58ebdfeb3.exe
Resource
win7-20240221-en
General
-
Target
b967ee7fe37bef5492b1f6a58ebdfeb3
-
Size
784KB
-
MD5
b967ee7fe37bef5492b1f6a58ebdfeb3
-
SHA1
d05901151612798b07d1ef289cb27ffe3a64788b
-
SHA256
1006e573bb4bf1655a982896ceeee553951d875196172669066505a245a118d0
-
SHA512
07b430cf8c639a58fe5848c0ff04b65626aaafcedcbf8e9b28ad85a759d09d0a70b50c39c3fcab302bc10da98cb66d696ccf30fbbedc50f23b61c8f5e1ff41d1
-
SSDEEP
12288:+OcaFN9quYc2sZECV6AgVvasdTOzlBt+ql+t/9REp7i6sbrl10T+wK0h/:P7X9q75sqCMbxTnIm387iLrlyTBfB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b967ee7fe37bef5492b1f6a58ebdfeb3
Files
-
b967ee7fe37bef5492b1f6a58ebdfeb3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE