Behavioral task
behavioral1
Sample
b7db79339db0fbb8239d93014ce9d303ffdcdd384ca3878313c703a45314f24b.exe
Resource
win7-20240903-en
General
-
Target
b7db79339db0fbb8239d93014ce9d303ffdcdd384ca3878313c703a45314f24b
-
Size
388KB
-
MD5
35059628d7a61da465d680d3ad89acc0
-
SHA1
fdfcbfeb7d32557a703c65d8bca7a4f6980b2149
-
SHA256
b7db79339db0fbb8239d93014ce9d303ffdcdd384ca3878313c703a45314f24b
-
SHA512
073674324852ba330e66a85664590296d19aebf7ee39dfb44a071a7cb7355857fdb225a3e65dcd63ea96ad5694cf105f3380ecbca1a396ae52e269ae50612984
-
SSDEEP
12288:67OdnoSGBFI16IEjQaY7I5dr2MGnvibuf5hys2:6Kd2I1JEjOyr2PnaSfbys2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7db79339db0fbb8239d93014ce9d303ffdcdd384ca3878313c703a45314f24b
Files
-
b7db79339db0fbb8239d93014ce9d303ffdcdd384ca3878313c703a45314f24b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE