Behavioral task
behavioral1
Sample
b997c875f6e380b6147eb1ce9787eead.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b997c875f6e380b6147eb1ce9787eead.exe
Resource
win10v2004-20231215-en
General
-
Target
b997c875f6e380b6147eb1ce9787eead
-
Size
260KB
-
MD5
b997c875f6e380b6147eb1ce9787eead
-
SHA1
808ca89e1c510a1592fbf053becb2c374cb75999
-
SHA256
259687914d46cfcfe7add07fd0de6638ebe03b7c5c1aca86010b7bfda0dee9bd
-
SHA512
2ac50b11a9a38948e27d2aa52e1077bd82289483f0ce15555944c41c599756998cca6d0e95b2e90f820081435a8ea0c1f3462c49786cc54085b5ba6f589e839d
-
SSDEEP
6144:jCAvbsus0Ea8mCBBuA1NppWpcwRgt7UmxZ5ZnN3Dqn/jxoZTRoS:jguzh8mCBBuA1FWpcEgtZZrJDu4TRoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b997c875f6e380b6147eb1ce9787eead
Files
-
b997c875f6e380b6147eb1ce9787eead.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 257KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE