Behavioral task
behavioral1
Sample
879e74e379f4ccae893f60165b9443af.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
879e74e379f4ccae893f60165b9443af.exe
Resource
win10v2004-20240319-en
General
-
Target
879e74e379f4ccae893f60165b9443af.bin
-
Size
57KB
-
MD5
879e74e379f4ccae893f60165b9443af
-
SHA1
90626f92e4aef450e13ec1532449e92a0fb1677e
-
SHA256
0bbd3e56f175819b014f06d198aa4fb43520db4a6aaa82d20a5c8c72d0e0dfe5
-
SHA512
306b787fd58cc542a8f51ecfb65616aebfde93bf8e63de41d74e12c863546fd3d51bb056cb315ab250efec56cb8da32f9ade8f9f904ce1027fccf1700e950d4f
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFeV0ZOfcpy8n:zj+soPSMOtEvwDpj4yD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 879e74e379f4ccae893f60165b9443af.bin
Files
-
879e74e379f4ccae893f60165b9443af.bin.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE