Behavioral task
behavioral1
Sample
b1f3aa81c9d3c56bb0d99814131a59351b1c448fe3f3b80956163e3461ca34b9.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1f3aa81c9d3c56bb0d99814131a59351b1c448fe3f3b80956163e3461ca34b9.exe
Resource
win10v2004-20240802-en
General
-
Target
b1f3aa81c9d3c56bb0d99814131a59351b1c448fe3f3b80956163e3461ca34b9
-
Size
1.5MB
-
MD5
22826dcead72f7af2a2cb850dc4386ba
-
SHA1
bb0908b103730548f53f34e230084b0b11ca79ec
-
SHA256
b1f3aa81c9d3c56bb0d99814131a59351b1c448fe3f3b80956163e3461ca34b9
-
SHA512
0caf6b3d64ba503a80219ca4da96d52cc6602d054ee25f8bfdbbdca7e19ddddf9bdadb6d63aff4eca264c8c5b7e002e3fcc882feafa2c60fc3959c7a2b2549c2
-
SSDEEP
24576:6zwArLT5Nyxkqwo/PldaEQWKzboAGMEb7pGgsZNlbnT4AdilXKPnAn+sCTyIVcBw:6P1gx/woeEQNoAGb/ZsZzbipKohCN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1f3aa81c9d3c56bb0d99814131a59351b1c448fe3f3b80956163e3461ca34b9
Files
-
b1f3aa81c9d3c56bb0d99814131a59351b1c448fe3f3b80956163e3461ca34b9.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE