Behavioral task
behavioral1
Sample
b8aed9ab064c2ff06e7599ba43a76a6465f14528f8239d3ef5a1a822fadf7c95.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8aed9ab064c2ff06e7599ba43a76a6465f14528f8239d3ef5a1a822fadf7c95.exe
Resource
win10v2004-20240704-en
General
-
Target
b8aed9ab064c2ff06e7599ba43a76a6465f14528f8239d3ef5a1a822fadf7c95
-
Size
867KB
-
MD5
cd2df86fc04316ce20fbd2dd06a3d8b9
-
SHA1
9ff44e0183be47b68e408aba192edc53b7bf661a
-
SHA256
b8aed9ab064c2ff06e7599ba43a76a6465f14528f8239d3ef5a1a822fadf7c95
-
SHA512
98235f2f83c1596e33305e898f7551b3867a8909cac0b54dc99764bc2dd33a470ebd2d2244cb01fa70cebca335b94c5cb858cc0c19726d991d6332cb8359ac28
-
SSDEEP
24576:lMqoYbZB5N+JlCROKK8iwyQoB65x8rS3r4lMs:qqoYb7wF8iwyCeI0l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8aed9ab064c2ff06e7599ba43a76a6465f14528f8239d3ef5a1a822fadf7c95
Files
-
b8aed9ab064c2ff06e7599ba43a76a6465f14528f8239d3ef5a1a822fadf7c95.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB