Behavioral task
behavioral1
Sample
b6ab1ac39bc15493e0802032e551e0c74593d881f3be0c0599e3d6ea10a3a3ab.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6ab1ac39bc15493e0802032e551e0c74593d881f3be0c0599e3d6ea10a3a3ab.exe
Resource
win10v2004-20240709-en
General
-
Target
b6ab1ac39bc15493e0802032e551e0c74593d881f3be0c0599e3d6ea10a3a3ab
-
Size
280KB
-
MD5
79c5cf42d94f7af12eec6a7cf4bf91b5
-
SHA1
9d420217150158b040e9252416b78cbd12c3dd83
-
SHA256
b6ab1ac39bc15493e0802032e551e0c74593d881f3be0c0599e3d6ea10a3a3ab
-
SHA512
53dd13bd42d7b0579b6dc798ab2b90d2e570faeefffa2ba647ca840753aeff4f1bc6e90a77c1b3200b8880596500c2572da37e5936c529b7e4cd7346be753cd2
-
SSDEEP
6144:Zrg28HU5KLOjwtyRhgSr8lR6cHi5arli7d5HR+iaUJCDQN92oS:ZEanRhL4lR6DqgdfmYuoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6ab1ac39bc15493e0802032e551e0c74593d881f3be0c0599e3d6ea10a3a3ab
Files
-
b6ab1ac39bc15493e0802032e551e0c74593d881f3be0c0599e3d6ea10a3a3ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE