Behavioral task
behavioral1
Sample
bb9c69ff6e66f01194156ed5e7f2e91a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb9c69ff6e66f01194156ed5e7f2e91a.exe
Resource
win10v2004-20240226-en
General
-
Target
bb9c69ff6e66f01194156ed5e7f2e91a
-
Size
2.8MB
-
MD5
bb9c69ff6e66f01194156ed5e7f2e91a
-
SHA1
4f85d4a7ed162da27cb98178a5158303f7881f1f
-
SHA256
605ff024ea7e04a2c88c9dfa023f053af707a8153f00eda8fd14c13c3e5c0b46
-
SHA512
3fe82ef8555df13f1001c3d5e3b5917e13dc72e9ae0b842a596230f4dc4400c5ca9b28000e4a556eb2af397a24463dda4c3943ec237a246cf7c7e6c0c5cf2a77
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91D:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0nn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb9c69ff6e66f01194156ed5e7f2e91a
Files
-
bb9c69ff6e66f01194156ed5e7f2e91a.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE