Behavioral task
behavioral1
Sample
bb7a87dcaabf682217125a0e124b0906.exe
Resource
win7-20240215-en
General
-
Target
bb7a87dcaabf682217125a0e124b0906
-
Size
784KB
-
MD5
bb7a87dcaabf682217125a0e124b0906
-
SHA1
63af148d9731312f1c6eba6b34d3ba91c5b618a1
-
SHA256
a1128420951c2c295a234613e72b7ec218e2a62c94100e063e39c2e4c8dc404d
-
SHA512
32e4bca885e72a97ffa705db0e56ae66deaac2ed02c8dd1c3886539a3bdd2f11a9a066e739af551ddf2635eb6c257401e6ec9badeeeac5d66561d84abf80d2bb
-
SSDEEP
24576:82vEYcfO3SZIhcETtUaIoP3A4MpTd0XD+5FlFVOX:82vEH2COGEpUaJojHGSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb7a87dcaabf682217125a0e124b0906
Files
-
bb7a87dcaabf682217125a0e124b0906.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE