Behavioral task
behavioral1
Sample
bb52be35711e62a43b7fcb4a09050efc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb52be35711e62a43b7fcb4a09050efc.exe
Resource
win10v2004-20240226-en
General
-
Target
bb52be35711e62a43b7fcb4a09050efc
-
Size
133KB
-
MD5
bb52be35711e62a43b7fcb4a09050efc
-
SHA1
b161de4e4e42fc32c29d54a70d259aeb930fa77b
-
SHA256
02a121b52b898681f1781d99bb3848cd54478fa2a19e3579c940838f408fc5d3
-
SHA512
0b50bc1261a3f62a0add06f28c9696b4438573bf748b52786da50696c9c965269b73cbb2d28245f2652657c5b6cbb1f125a559289d2239363d7476addb2333b5
-
SSDEEP
3072:tT78Vct//7zTFe6fexgh4wACNj+piTCW9pYAMo+wayQ:ts2t/jzh7cghJNj+perz91Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb52be35711e62a43b7fcb4a09050efc
Files
-
bb52be35711e62a43b7fcb4a09050efc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE