Behavioral task
behavioral1
Sample
b420dc4979c980f7e1d4b2fa048cb600c6d3e35b4fb018453c68a223d8a4efd6.exe
Resource
win7-20240903-en
General
-
Target
b420dc4979c980f7e1d4b2fa048cb600c6d3e35b4fb018453c68a223d8a4efd6
-
Size
2.6MB
-
MD5
0ce065a7bf9ecead950cb75cc96ed045
-
SHA1
d2bf301e087ccf658ec47a287d1e6e780a2b2545
-
SHA256
b420dc4979c980f7e1d4b2fa048cb600c6d3e35b4fb018453c68a223d8a4efd6
-
SHA512
81a7b4ee8360e62868d3ff190b154e87393b63a1d2dcde52b67345535054f0c85c2f0f6e9ab1e86afaf747cfe8ca2607c6b20848a511610cfa4c1410d87622b9
-
SSDEEP
49152:Ep0rS/hAg4I10ilGGxPzLG62MuL1z914XzPDzFBB58c:Kf/hAg4I7U066avKbfFBBG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b420dc4979c980f7e1d4b2fa048cb600c6d3e35b4fb018453c68a223d8a4efd6
Files
-
b420dc4979c980f7e1d4b2fa048cb600c6d3e35b4fb018453c68a223d8a4efd6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE