Behavioral task
behavioral1
Sample
Simple_Bible_Reader_5_4_8.exe
Resource
win11-20240221-en
General
-
Target
Simple_Bible_Reader_5_4_8.exe
-
Size
10.9MB
-
MD5
42e885fb62f603c9ea078c6147fd0526
-
SHA1
6d43dd4f6ee10c84623312709391cacf88770fee
-
SHA256
30d48c043af800292f7a46f4cd14e81dd4df4cb40be3f44a1d9fe06428bbd6b1
-
SHA512
5a0f485683ed9c751cc453badc42f69372a11c06e36c62306f9f4401f83e15d9ecbe85122fb425e66290528d10077c0e3bdd7346f7778d1b4cfcbd173f5813c2
-
SSDEEP
196608:VlF+iaTUYplgInuAYArkmHDfoBYqS8PtfwwzS2WP9UegMLzEiliJoclQ0Hvu:Vl0iEUYplg2uErTH8RRwwzSbiegMLglG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Simple_Bible_Reader_5_4_8.exe
Files
-
Simple_Bible_Reader_5_4_8.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE