General
-
Target
VBucks.exe
-
Size
54KB
-
MD5
87b518e386a4b3af92865caacd998027
-
SHA1
f888ac1b1ee40cff5319c4ed3826f3fb842f1052
-
SHA256
791caef7efa189f1eab6650cce6d3bfb7436619d787d84e301ac5e651d0bbee4
-
SHA512
f03536687a29a1cf101096c34141f03e82eb9a45f153a48f9359acc1c1a7774709688e822a7a7851cbdea963f44177da6e60ddbf896aff724f4fba0b7a5f6c8a
-
SSDEEP
1536:j4dJooh0Wa0aer344Jw/ytUqVS5EkIijQ1fTN9:j4dzVTaer344JzthRZijQ1J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VBucks.exe
Files
-
VBucks.exe.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE