Behavioral task
behavioral1
Sample
b994b20561fbd89e066053cfc34a5bd765fec5d5d9514cf4f1fc783414ccc398.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b994b20561fbd89e066053cfc34a5bd765fec5d5d9514cf4f1fc783414ccc398.exe
Resource
win10v2004-20240802-en
General
-
Target
b994b20561fbd89e066053cfc34a5bd765fec5d5d9514cf4f1fc783414ccc398.exe
-
Size
32.8MB
-
MD5
22668951d7774f5607e455671529e5da
-
SHA1
e54bbde2e3c215dc5d7c266c9eb82a5da13ddc2f
-
SHA256
b994b20561fbd89e066053cfc34a5bd765fec5d5d9514cf4f1fc783414ccc398
-
SHA512
2985e0b6a89d2e00129b3033573586e5dfc708dd8e8ab6f9eab5e18aaa051f29484bf8c52959628fd0be86373fefd3acf3f5a7ce7cf83b9e6f2e1986f4c85c2d
-
SSDEEP
786432:0HgyqbEXMl1XetK8LoZPIhlsL2BVp39qvMWkSqX:0gy4E8rXe/cR6C6/qvM/S+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b994b20561fbd89e066053cfc34a5bd765fec5d5d9514cf4f1fc783414ccc398.exe
Files
-
b994b20561fbd89e066053cfc34a5bd765fec5d5d9514cf4f1fc783414ccc398.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 8.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32.8MB - Virtual size: 32.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE