Behavioral task
behavioral1
Sample
bb865165122a2a3acc71dd730b1bfe21.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb865165122a2a3acc71dd730b1bfe21.exe
Resource
win10v2004-20240226-en
General
-
Target
bb865165122a2a3acc71dd730b1bfe21
-
Size
5.1MB
-
MD5
bb865165122a2a3acc71dd730b1bfe21
-
SHA1
9305f0a00f1e3ed6b173dc3e92e04a1f62d09c71
-
SHA256
36151548355efb94d6cccfe866228199d4238c1d689c03b651023760db81db71
-
SHA512
f7df36cddf4d7e423258bd3475a62b5c4d595d0d6b1a7a1de746e964a9da0da7fa981f6a920ba41483599e38088163007d15e0c42ea0d4806a9183fbd7061290
-
SSDEEP
49152:2v3QWc2ALyTOsugzAUJ6NbXcu1LXeeay35bkrfg8FYri+ts5EjdZwaA9jCIFkAd2:2cotksu1930g2yOEjjs9/g3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb865165122a2a3acc71dd730b1bfe21
Files
-
bb865165122a2a3acc71dd730b1bfe21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE