Behavioral task
behavioral1
Sample
b17db3a6a3695aaf8fa6c2f5ba74dc6a303e4e58992cebd56ac037510bd68331.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b17db3a6a3695aaf8fa6c2f5ba74dc6a303e4e58992cebd56ac037510bd68331.exe
Resource
win10v2004-20240802-en
General
-
Target
b17db3a6a3695aaf8fa6c2f5ba74dc6a303e4e58992cebd56ac037510bd68331
-
Size
70KB
-
MD5
5dacf68c2ef6b196ddf8a8381d9efcd3
-
SHA1
bbcccf0d4b96017fa37c41bf18c514d5479e64ba
-
SHA256
b17db3a6a3695aaf8fa6c2f5ba74dc6a303e4e58992cebd56ac037510bd68331
-
SHA512
200fe99d28d34ef812c3d69057e64f684298b7db861a993e7b4dc5f3818c22f1f0691626a0b627000fbce6cccb7bd4014d7dfc93f72dd67622e6cc3cd0e9e2dc
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jMO/7OSbo5+Oi6Jfo5+OiK:V7Zf/FAxTWoJJB7LD2I2IbSq+qqlqzE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b17db3a6a3695aaf8fa6c2f5ba74dc6a303e4e58992cebd56ac037510bd68331
Files
-
b17db3a6a3695aaf8fa6c2f5ba74dc6a303e4e58992cebd56ac037510bd68331.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE