Behavioral task
behavioral1
Sample
b9a1c2a5645f482a4086f9e8d08f03f5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9a1c2a5645f482a4086f9e8d08f03f5.exe
Resource
win10v2004-20240226-en
General
-
Target
b9a1c2a5645f482a4086f9e8d08f03f5
-
Size
3.9MB
-
MD5
b9a1c2a5645f482a4086f9e8d08f03f5
-
SHA1
ff1fe361614cc649b9a2971f3ce7cc2d6dddffa2
-
SHA256
8b258ce42541add8239b8cc0b95b9cc5c66eeee8db194d98fcfa6cb9901d186d
-
SHA512
43592d542ba942f0abd299bb6b16ab75bc4eb0aeff86d3e0a884723902ea041a996acb3c87102ea0821e194aa83b78b7db8f2d6cb5ac5c33c34b62f630a8f3f3
-
SSDEEP
98304:aJm90raB4IvXz6dKqQknXl/XHhGUKvXz6dKqQknfecwFxqvXz6dKqQknXl/XHhGe:6kVudKqQk5XHhGUIudKqQk4YudKqQk5H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9a1c2a5645f482a4086f9e8d08f03f5
Files
-
b9a1c2a5645f482a4086f9e8d08f03f5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE