Overview

overview

1

Static

static

10

23848c4410...82.exe

windows7_x64

1

23848c4410...82.exe

windows10-2004_x64

1

Resubmissions

28/07/2022, 16:23

220728-tv84wshcb710

17/04/2022, 07:21

220417-h6rhfaaebn10

Sharing

Copy URL Twitter E-mail

General

  • Target
    23848c44109aacce3d6f568cc946d2cf0f397b3689c805277805ad3c3cb2f482
  • Size 956KB
  • Sample220417-h6rhfaaebn
  • SHA256 23848c44109aacce3d6f568cc946d2cf0f397b3689c805277805ad3c3cb2f482
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
upxbandook

Malware Config

Signatures

  • Bandook Payload 1 IoCs
  • Bandook family
    bandook
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

File Explorer

  • 23848c44109aacce3d6f568cc946d2cf0f397b3689c805277805ad3c3cb2f482
    .exe 956KB

23848c44109aacce3d6f568cc946d2cf0f397b3689c805277805ad3c3cb2f482

  • SHA256 23848c44109aacce3d6f568cc946d2cf0f397b3689c805277805ad3c3cb2f482
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Bandook Payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
Minor OS version
Major OS version
Entry point
832000
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths