Behavioral task
behavioral1
Sample
bf2cd3aa6e3ab3477673b223859665eb30e3004060060e45d6ec8bd4f6b31830.exe
Resource
win7-20230712-en
General
-
Target
bf2cd3aa6e3ab3477673b223859665eb30e3004060060e45d6ec8bd4f6b31830
-
Size
119KB
-
MD5
0e6c976818b0c54825865e33d361e0dd
-
SHA1
111a8e9e199c53eb5f03807b59cc6397c6670156
-
SHA256
bf2cd3aa6e3ab3477673b223859665eb30e3004060060e45d6ec8bd4f6b31830
-
SHA512
1bb067e00d13ca6f67cfd2938e7ac6638deeeb16cf1c2d26ad29a0334cd6bcc08754406e5edb0f4c10ea5aae5a6194a1006342228b858f0955cf8838777ac62e
-
SSDEEP
3072:CY6MNa55+KdIYG8lpwM3GNg2pN7IxtqINHDI4aHAeoutY:88qpq80m/2pmx9FzeoSY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf2cd3aa6e3ab3477673b223859665eb30e3004060060e45d6ec8bd4f6b31830
Files
-
bf2cd3aa6e3ab3477673b223859665eb30e3004060060e45d6ec8bd4f6b31830.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ