Behavioral task
behavioral1
Sample
bb9a2bb2d3edddc29f3fc7323d504bfa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb9a2bb2d3edddc29f3fc7323d504bfa.exe
Resource
win10v2004-20240226-en
General
-
Target
bb9a2bb2d3edddc29f3fc7323d504bfa
-
Size
1.3MB
-
MD5
bb9a2bb2d3edddc29f3fc7323d504bfa
-
SHA1
6fe9a9cf3007c4ba5c3542eb428b164e3d5acbd1
-
SHA256
fd4d47b856641b56f55901f7e605549eb5147e4078cb763db65e2ce668403826
-
SHA512
3a8ec849ff517542d2004d984b208e4f296f37ba8f8b558461c2009bd9e1bbdc7c826a1a57596e1de4f0758e334eebae27de1be0c86efe8663a54004109334f0
-
SSDEEP
24576:jFWh3EOxva4+Lpuj5uIB+v4kTgDuPdOk8hz7s/YFZTeWO:JWh3v6uFD+QodP8hkGZSf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb9a2bb2d3edddc29f3fc7323d504bfa
Files
-
bb9a2bb2d3edddc29f3fc7323d504bfa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE