Behavioral task
behavioral1
Sample
b13754488bcda3f61440195af7118320N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b13754488bcda3f61440195af7118320N.exe
Resource
win10v2004-20240802-en
General
-
Target
b13754488bcda3f61440195af7118320N.exe
-
Size
64KB
-
MD5
b13754488bcda3f61440195af7118320
-
SHA1
ec75daece25123ca79347dd27cce141a9facf7fc
-
SHA256
6d4220e41965e7d5e59e50593744ab1d6052c40668ff1eb28a70442c7b31dae6
-
SHA512
ffe864101a2d1c5229b558625f3018010f8bd237f9831fec037b650e0263a1e6f2c8af5879bc437403f597e216bed0e4581192bdf640bc03eaedc1708f1ba6c4
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jMO/7OSbo5+Oi6Jfo5+Oi2:V7Zf/FAxTWoJJB7LD2I2IbSq+z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b13754488bcda3f61440195af7118320N.exe
Files
-
b13754488bcda3f61440195af7118320N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE