Behavioral task
behavioral1
Sample
@ByFlash.exe
Resource
win10v2004-20230703-es
General
-
Target
@ByFlash.exe
-
Size
26KB
-
MD5
1d6a20545a39511d2ecc1c584aadb7f9
-
SHA1
d03b9ccbbf44be03f071bb94825490c6c6ac8eaf
-
SHA256
66e0f378970b81c27e48bee010b1fcd2dcd87641b887951c268bd1eb700ea987
-
SHA512
7cdaf1ac1ee531b99b7892901e782f077c12fd1e99e97bcaca29019e6759a6c46414757a18a7674b1e4bc5e947e1a0ba3be008c5e5d1ab72208b34f5a58ca72c
-
SSDEEP
768:m1NAUsbxtT6sFst/3IrdlLUwynbcuyD7U6JyO:m1NAUwtT6sFstwrbUnnouy86JyO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource @ByFlash.exe
Files
-
@ByFlash.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE