Behavioral task
behavioral1
Sample
bb905a6ba86874b5bba98d606ff7feb034d3ed042ec7121c9df8828149564977.exe
Resource
win7-20240704-en
General
-
Target
bb905a6ba86874b5bba98d606ff7feb034d3ed042ec7121c9df8828149564977
-
Size
124KB
-
MD5
d08b372306efbf7857090f623e24b2e6
-
SHA1
2561a86c90b2be489bd7704e1c68bc9b66806f15
-
SHA256
bb905a6ba86874b5bba98d606ff7feb034d3ed042ec7121c9df8828149564977
-
SHA512
fc1b8af0213fa77688aa9864021f344cd0f6d44fbd08aef6ed94391c56cae05c6312f364dc6d8f2f6c2c1a0e6d12d4b7b01c4181836fdf1738beaf7909f5a8ee
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH5nZU/c:kcm4FmowdHoSphraHcpOFltHJZU/c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb905a6ba86874b5bba98d606ff7feb034d3ed042ec7121c9df8828149564977
Files
-
bb905a6ba86874b5bba98d606ff7feb034d3ed042ec7121c9df8828149564977.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE