Behavioral task
behavioral1
Sample
b3d30e1bbd0c9e9070cefa2e6a7e8940N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3d30e1bbd0c9e9070cefa2e6a7e8940N.exe
Resource
win10v2004-20240802-en
General
-
Target
b3d30e1bbd0c9e9070cefa2e6a7e8940N.exe
-
Size
22KB
-
MD5
b3d30e1bbd0c9e9070cefa2e6a7e8940
-
SHA1
7e6c0bbc90a7fa60846782f8deb2bd520c5d74d0
-
SHA256
309f4eb5134c0c879d49c2255e07ed18c28b2deb5e081da22d22a503b460f7e9
-
SHA512
5cfb200ae3a51a8ba7d4cce4ca19fb3bd3cb88ca0b87c81fbcf81739cf4c3a6355547579c81d43fdc58da412b933bbba1d67452c00b12fde569a49af0de3f922
-
SSDEEP
192:29UskRgoQhhEgkp1d647CR6TkxxX4quyEjKCw5MWKGpi:29AR/QfETd647Q6Tb+d10
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3d30e1bbd0c9e9070cefa2e6a7e8940N.exe
Files
-
b3d30e1bbd0c9e9070cefa2e6a7e8940N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE