Behavioral task
behavioral1
Sample
bb85c4de1d29bc87db4b9b50e110ae58.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb85c4de1d29bc87db4b9b50e110ae58.exe
Resource
win10v2004-20240226-en
General
-
Target
bb85c4de1d29bc87db4b9b50e110ae58
-
Size
10.2MB
-
MD5
bb85c4de1d29bc87db4b9b50e110ae58
-
SHA1
55c6e77b25ed87fb5680a5ecc03815622e83b53f
-
SHA256
89887ce39a1a13613b2e936ee18e928f93d48cb03d5732c19ba1a76b0e4c176a
-
SHA512
0feee1b26eba6ce264cfe4ee0c2240e0f52568ee0d6cec9c8adf5bc65a18d86ed72349851d91fde29dcc5fb6b4bf07a11b60a77f7c77f0c4fe692f106fe8b57c
-
SSDEEP
98304:+LtEIWJTE30g2yOEjjs9/g3oZs2LM24YLh3SJ/GOI30g2yOEjjs9/g3:+L63FZUju/PsBSXOxZUju/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb85c4de1d29bc87db4b9b50e110ae58
Files
-
bb85c4de1d29bc87db4b9b50e110ae58.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE