Behavioral task
behavioral1
Sample
b0f28150e375a1504bc50e0dfa3e0f8384a84d30dcfe0c3878c036f386d57cd4N.exe
Resource
win7-20240903-en
General
-
Target
b0f28150e375a1504bc50e0dfa3e0f8384a84d30dcfe0c3878c036f386d57cd4N
-
Size
4.2MB
-
MD5
d983ab2100d33703a7e89c4327626ba0
-
SHA1
f3c0790c256b1b30ff8f74ded742e6561e12b09c
-
SHA256
b0f28150e375a1504bc50e0dfa3e0f8384a84d30dcfe0c3878c036f386d57cd4
-
SHA512
6dd2bc27582e513ec228cc5ae2cd62c4766c75dcb55f0cc2511982b2b2581a184b87c073a02ffbaa876963f1dd8f635806b98cee4edfd4c2e489dfe72b91b19d
-
SSDEEP
24576:WaYnzBtkARKzQ/1JMup/6nLhOZrSEu8CkB7mA5Q2CeEYV/TGtDlG5DBMYjvDwPEx:RIugQX1OZ68JUUvCeEC/TGtDiaYv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0f28150e375a1504bc50e0dfa3e0f8384a84d30dcfe0c3878c036f386d57cd4N
Files
-
b0f28150e375a1504bc50e0dfa3e0f8384a84d30dcfe0c3878c036f386d57cd4N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fzLFpVyT Size: 47KB - Virtual size: 46KB
PjkLGEkK Size: 95KB - Virtual size: 95KB
wmFhcKED Size: 42KB - Virtual size: 42KB
xhUHydBk Size: 87KB - Virtual size: 86KB
XgfIXxjH Size: 14KB - Virtual size: 14KB
EuqZVIxa Size: 81KB - Virtual size: 81KB
vjrtnupH Size: 65KB - Virtual size: 65KB
YQcbehjT Size: 25KB - Virtual size: 24KB
trcmySBs Size: 1KB - Virtual size: 1KB
wqtTZzaV Size: 183KB - Virtual size: 183KB
ZFXjsUra Size: 43KB - Virtual size: 43KB
MHopZTDd Size: 5KB - Virtual size: 4KB
CsDkKaRf Size: 41KB - Virtual size: 40KB
SPFRKyOQ Size: 16KB - Virtual size: 16KB
CTIsHpJp Size: 38KB - Virtual size: 38KB
YKAdhowB Size: 34KB - Virtual size: 33KB
xQwkAMXl Size: 1024B - Virtual size: 577B
VSCDlpAm Size: 537KB - Virtual size: 536KB
oudMBhVj Size: 65KB - Virtual size: 64KB
ezZrbYtu Size: 155KB - Virtual size: 154KB
MKKxgFdg Size: 43KB - Virtual size: 42KB
rYkdfQOR Size: 25KB - Virtual size: 25KB
dQTVqTGJ Size: 6KB - Virtual size: 5KB
bpUePsvT Size: 50KB - Virtual size: 50KB
AziluaEQ Size: 9KB - Virtual size: 9KB
LPtsdoeF Size: 19KB - Virtual size: 18KB
ZVgNVCgI Size: 12KB - Virtual size: 12KB
vRrIVMPn Size: 2KB - Virtual size: 1KB
NlcpbXLP Size: 2KB - Virtual size: 2KB
chhqMBAg Size: 19KB - Virtual size: 19KB
ZDoMnCWf Size: 22KB - Virtual size: 21KB
xbRItlXL Size: 76KB - Virtual size: 76KB
MhYEJLfr Size: 64KB - Virtual size: 63KB
VRLPhZUf Size: 512B - Virtual size: 99B
OjYUyJWJ Size: 52KB - Virtual size: 51KB
zhCPTOUr Size: 51KB - Virtual size: 50KB
ZMSCDOpS Size: 512B - Virtual size: 322B
XQTvnsZS Size: 44KB - Virtual size: 43KB
NqgLoYMS Size: 121KB - Virtual size: 120KB
yYqyxoJW Size: 4KB - Virtual size: 3KB
pAOizJgd Size: 96KB - Virtual size: 95KB
gUZeAbYT Size: 113KB - Virtual size: 112KB
HCCwbCDm Size: 23KB - Virtual size: 23KB
PpxDLcPF Size: 6KB - Virtual size: 5KB
YQHNeFZX Size: 23KB - Virtual size: 22KB
gynOqMjx Size: 48KB - Virtual size: 47KB
ptSaQNsJ Size: 26KB - Virtual size: 26KB
KcrQPNMD Size: 61KB - Virtual size: 61KB
PCcKWSOQ Size: 42KB - Virtual size: 42KB
XQwrciVm Size: 512B - Virtual size: 222B
lrXXRgJQ Size: 63KB - Virtual size: 62KB
ndiknFXn Size: 26KB - Virtual size: 26KB
wlgfuqMm Size: 73KB - Virtual size: 73KB
oLFjMlCL Size: 34KB - Virtual size: 34KB
fvPbsfyA Size: 60KB - Virtual size: 60KB
nihhBamo Size: 3KB - Virtual size: 3KB
TkARwAIP Size: 4KB - Virtual size: 4KB
BOfCccKI Size: 74KB - Virtual size: 73KB
FPhoRaIg Size: 52KB - Virtual size: 52KB
LiQJBcHB Size: 1KB - Virtual size: 1KB
aQULzKSn Size: 1KB - Virtual size: 1KB
odJzsoNF Size: 2KB - Virtual size: 1KB
LHmPJGGj Size: 42KB - Virtual size: 41KB
gZczuDXi Size: 57KB - Virtual size: 56KB
iWzemfXW Size: 760KB - Virtual size: 759KB
Qugcaypt Size: 7KB - Virtual size: 6KB
jbIJscGk Size: 9KB - Virtual size: 9KB