Behavioral task
behavioral1
Sample
b533e4fa5811c3ce82cd45c510b3576e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b533e4fa5811c3ce82cd45c510b3576e.exe
Resource
win10v2004-20231215-en
General
-
Target
b533e4fa5811c3ce82cd45c510b3576e
-
Size
859KB
-
MD5
b533e4fa5811c3ce82cd45c510b3576e
-
SHA1
7f9fe10cc03f2947df2cdc876aecb424619405b2
-
SHA256
352bb51267ca3fea8321f2a07782c202d87bbf9a5ac06a7da12792cdfcb260e4
-
SHA512
0d76f11d6b6f1e1539f31e0d71a3adef14aa61b72798793f735ca40ca86c6255835b2ed055f01e7744e8ab03d217186070d706905722b1290ace2e5953e5bb21
-
SSDEEP
12288:tEQoS9qhN0ikPCJejoa19TP69FoiZuqHaleGppXJadSyH912stSg3DirahNT4vtg:t2NZqCJeHW992eGppaSI91BogzivSB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b533e4fa5811c3ce82cd45c510b3576e
Files
-
b533e4fa5811c3ce82cd45c510b3576e.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE