Behavioral task
behavioral1
Sample
b8c0f740d62a941be1c63e8427e23d0c0a9bbc957b75ea1f85146f576869d719.exe
Resource
win7-20240903-en
General
-
Target
b8c0f740d62a941be1c63e8427e23d0c0a9bbc957b75ea1f85146f576869d719
-
Size
199KB
-
MD5
ad2ed6f7087e53262bd1f534cbce666b
-
SHA1
ec073cf2596b4158603fa469b6cfc8f72494c031
-
SHA256
b8c0f740d62a941be1c63e8427e23d0c0a9bbc957b75ea1f85146f576869d719
-
SHA512
be2d8dfc8479b32e50e225e5319c3cda55eba5e19ffe0825b70b8d3a7f17a152c9d2b425b00763b4f2967fbdc9bd8272b2e3beb1dd87ee184bacea408742e438
-
SSDEEP
6144:f40IFNAoSr/3dc+cAUyY413KyVFVEKO3QCGSGdBs1H:CyoSDBN16IEJZGpdBw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8c0f740d62a941be1c63e8427e23d0c0a9bbc957b75ea1f85146f576869d719
Files
-
b8c0f740d62a941be1c63e8427e23d0c0a9bbc957b75ea1f85146f576869d719.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE