Behavioral task
behavioral1
Sample
b841760669b07d6df5adac89934a2a2d.exe
Resource
win7-20240221-en
General
-
Target
b841760669b07d6df5adac89934a2a2d.bin
-
Size
594KB
-
MD5
b841760669b07d6df5adac89934a2a2d
-
SHA1
ee073a0c4d275905fa57e96b56f1b9601d04eae4
-
SHA256
3eb2add244b37ab5d9bd348b84b21ce109c83da6844445e60b20c9ea64cd995d
-
SHA512
e9e3bb673cd4bb942a62a102fdbdb6b307187c7c5b91553d66f272bb84b1581f1836978cdd3cc7c29fe18a5c204917ce054c5879c86519d848bb5fa9ab794b83
-
SSDEEP
12288:joO+SDUNkQyZRd8pxiZVMx9ydRCDZq6dA3DqcJTkPqfVgbaOFoP6U6PpBlvnr+:jJ+S6cdsEjMXGRCVbdSqgTUqfEaOZhBg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b841760669b07d6df5adac89934a2a2d.bin
Files
-
b841760669b07d6df5adac89934a2a2d.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 560KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE