Behavioral task
behavioral1
Sample
bb42b3972f2b8582f5d7235f0105def4.exe
Resource
win7-20240221-en
General
-
Target
bb42b3972f2b8582f5d7235f0105def4
-
Size
2.9MB
-
MD5
bb42b3972f2b8582f5d7235f0105def4
-
SHA1
19543352657e1e8d2fa2fe4b3ff3df95df71ff63
-
SHA256
c72aa9520c5c392f6d4cb18425546e9a38eecac1477e822887609b4e7362d1f2
-
SHA512
a87586c6d65cdf0029bbbb2816e558455ab9f7978cbff47b36f96383781967f36f956d44f26e59a5d1a1e55ee094d3449db3abaf0e97e85ff37ac8f031f2acbf
-
SSDEEP
49152:78zCMDSgmMwfZv0DY49HNbSIgnZnlGIj5qf5KEtCGGiWYLe8hFsV6Ud9hO0+FjeJ:A2MDSNMp9HEPnfGIj58EEteiHbK6UEfa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb42b3972f2b8582f5d7235f0105def4
Files
-
bb42b3972f2b8582f5d7235f0105def4.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE