Behavioral task
behavioral1
Sample
bb1f20ef3116c5ac3b122a07e2fac760.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb1f20ef3116c5ac3b122a07e2fac760.exe
Resource
win10v2004-20240226-en
General
-
Target
bb1f20ef3116c5ac3b122a07e2fac760
-
Size
2.0MB
-
MD5
bb1f20ef3116c5ac3b122a07e2fac760
-
SHA1
59ad0df84757d9adcdf269ac5757ca59d8d7b76d
-
SHA256
9e800f134e7c4d697de9317f1bf416cec2066ff2b409dd317a28bff513866557
-
SHA512
b4db77ed82b0baf611fd7ec3d6e6bedcdfc4cf484e8504395fcd68159d95d960b9d07925ac7f5130318bf5702ee7d3d6be7e9502184048752cf3c71230d3880d
-
SSDEEP
49152:jFRW+/TBgxs6nvbcakLz0ibq6yqhHoZY9tNKPrqIudccIXMcakLz0ibq6yqh:jFd/is6nvbcakcibiqhIZY9tkPrqPdcH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb1f20ef3116c5ac3b122a07e2fac760
Files
-
bb1f20ef3116c5ac3b122a07e2fac760.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE