Behavioral task
behavioral1
Sample
b9a1b1626558824020c3e1d34e365a10.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9a1b1626558824020c3e1d34e365a10.exe
Resource
win10v2004-20240226-en
General
-
Target
b9a1b1626558824020c3e1d34e365a10
-
Size
3.9MB
-
MD5
b9a1b1626558824020c3e1d34e365a10
-
SHA1
b31c29b7fdbb120fde544dba5fbeab2056137126
-
SHA256
536eb1e2a056aa840cc5ee15cfc7907b5b900fa44dd0f48e4dee262fcb79097d
-
SHA512
11fe2db13191154f44d61a9c211ed3d61c1fadea9ec833075288091ff9536cf73454a413c623a38b22f87407b1bb311f75006f4edf92e210d21eb7eae8ce970a
-
SSDEEP
98304:SWlar4Il7E2cakcibiqhwIMBEdEpaMCvScakcibiqhi8g0lRqPNIPa4cakcibiqT:BK4IlY2dlirFucydlirwOWga4dlirFu2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9a1b1626558824020c3e1d34e365a10
Files
-
b9a1b1626558824020c3e1d34e365a10.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE