Behavioral task
behavioral1
Sample
bb5f69d5d7bc2be30b9c54d16350ee68.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb5f69d5d7bc2be30b9c54d16350ee68.exe
Resource
win10v2004-20240226-en
General
-
Target
bb5f69d5d7bc2be30b9c54d16350ee68
-
Size
1.3MB
-
MD5
bb5f69d5d7bc2be30b9c54d16350ee68
-
SHA1
345884fefe89251c006b4f3615628ea743e16299
-
SHA256
5a42ca5d042b05a95909dc5a5798d8f78d3f7454aa90ff821a1fa7d62955bf59
-
SHA512
3a179455b54133fb13de320cf0bad98dcae955701464323ffdcddef3312c7dd85d26a54bed5648516ccf610db24b01179e2421313918fa5a695c05538e5a58ed
-
SSDEEP
24576:FsKpHaXHQzQfuzTfdQX5mSGls4KGR9mvNOX8tQK0Z8gI3JdYcOyWO:FZ6XH/MdQX5mScsQOvNxQKOI7Ff
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb5f69d5d7bc2be30b9c54d16350ee68
Files
-
bb5f69d5d7bc2be30b9c54d16350ee68.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE