Behavioral task
behavioral1
Sample
b9e44ebf34df355fb0c6e3b96d262be190cc4c0f9ee6667a51407a169a6ac46d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b9e44ebf34df355fb0c6e3b96d262be190cc4c0f9ee6667a51407a169a6ac46d.exe
Resource
win10v2004-20240508-en
General
-
Target
b9e44ebf34df355fb0c6e3b96d262be190cc4c0f9ee6667a51407a169a6ac46d
-
Size
1.4MB
-
MD5
c421ba5be66283f0611731742598424e
-
SHA1
d7e5b3ac527852f25ef7d444a6ca6f53ab40118d
-
SHA256
b9e44ebf34df355fb0c6e3b96d262be190cc4c0f9ee6667a51407a169a6ac46d
-
SHA512
6929094cb4b277153beb676d51ba9ad2eee9ebc7cbb39c25e62deb6f2d026f25d2da4af7c4dd2c2bf65976ca479337ceefbe78e177e5d4a66618ca6fa9ec89ab
-
SSDEEP
12288:vG3Rr37fV+Fa//zGi1fw4iiFfPdlghXPDQYu37:vG31fcF8KcfFnif
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e44ebf34df355fb0c6e3b96d262be190cc4c0f9ee6667a51407a169a6ac46d
Files
-
b9e44ebf34df355fb0c6e3b96d262be190cc4c0f9ee6667a51407a169a6ac46d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE