Behavioral task
behavioral1
Sample
ffb70d9f532defce50145891531677377151cee0b10ccdaf5b05aed3fb90ead0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffb70d9f532defce50145891531677377151cee0b10ccdaf5b05aed3fb90ead0.exe
Resource
win10v2004-20240226-en
General
-
Target
ffb70d9f532defce50145891531677377151cee0b10ccdaf5b05aed3fb90ead0
-
Size
2.9MB
-
MD5
86e3bddedfb836f21ea92870cfdc5b7b
-
SHA1
6a2ce69bb3b71c0c0ce9d996d39047e555b59566
-
SHA256
ffb70d9f532defce50145891531677377151cee0b10ccdaf5b05aed3fb90ead0
-
SHA512
34c2b956b420f13f39f916b9a7a492f6ef7f2d78939a52c103aa087440f1e21b15591d9319cf1385b5fc634f32b23b7d4d95505335a7773f0241cb8925317d04
-
SSDEEP
49152:jFJ57n3C6ptR9+HkmvP6HLLNHb3QjUY9oKJi23AVggzyBM7P8:pP3C6ptuvsFDu+KJ3QVeM7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffb70d9f532defce50145891531677377151cee0b10ccdaf5b05aed3fb90ead0
Files
-
ffb70d9f532defce50145891531677377151cee0b10ccdaf5b05aed3fb90ead0.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE