Behavioral task
behavioral1
Sample
bcad2beda4ad7c22367900b941acd39131a9b6d8d222121391a3f21b34f1ef64.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
bcad2beda4ad7c22367900b941acd39131a9b6d8d222121391a3f21b34f1ef64.exe
Resource
win10v2004-20230621-en
General
-
Target
bcad2beda4ad7c22367900b941acd39131a9b6d8d222121391a3f21b34f1ef64
-
Size
2.3MB
-
MD5
5a147e31551936d24797b53df851e231
-
SHA1
23a2a9f45103b20a78f807e4b533eba3c11bb05e
-
SHA256
bcad2beda4ad7c22367900b941acd39131a9b6d8d222121391a3f21b34f1ef64
-
SHA512
bfa854628fe1c6ed458520fbfef0f9905f3a3b183045d642fc1272f5f4281a956ba502268953a3df809618beb477e55ffd19a012f036f4b33c60a6512bcba8a9
-
SSDEEP
49152:BAc2oFGGevvpn8qAIghmAQ5wkmUG4+HdfryqnX:BAc2oF8pG/gAnUG4+HdfryqnX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcad2beda4ad7c22367900b941acd39131a9b6d8d222121391a3f21b34f1ef64
Files
-
bcad2beda4ad7c22367900b941acd39131a9b6d8d222121391a3f21b34f1ef64.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 8.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE