Behavioral task
behavioral1
Sample
bb55c52e519890a0ad7a6656a110fdeb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bb55c52e519890a0ad7a6656a110fdeb.exe
Resource
win10v2004-20240226-en
General
-
Target
bb55c52e519890a0ad7a6656a110fdeb
-
Size
12KB
-
MD5
bb55c52e519890a0ad7a6656a110fdeb
-
SHA1
9184ebaab10e195b2756564d504f98678602d2d1
-
SHA256
0a2a1244f91ccc25e8adbbfa4312354ef8924cc50a119719f39f9fd706d876ea
-
SHA512
cbd13e6552f74a5eb2b90bab058e8d803ea7f47d3d11a01b8070b656c2a4bad68dfee15594677ef00f5db578ff141de0560bd2d9eeeb418f95d4a7fdc417935c
-
SSDEEP
192:gJKL/FThpI+uLXl68hgLCRWEu45BJKL/FThpI+uLXl68hgLCRWEu45eM:gglu+uLXQ8yLCUSBglu+uLXQ8yLCUSeM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb55c52e519890a0ad7a6656a110fdeb
Files
-
bb55c52e519890a0ad7a6656a110fdeb.exe windows:1 windows x86 arch:x86
9e7163cbb8220d303acb31f22cb8306f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CopySid
kernel32
CloseConsoleHandle
user32
CreateCursor
gdi32
CancelDC
ws2_32
inet_addr
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE