Behavioral task
behavioral1
Sample
ba01792bb975a5c74fcf66da091e113c95f5653296e63250772472dd7c9a2086.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ba01792bb975a5c74fcf66da091e113c95f5653296e63250772472dd7c9a2086.exe
Resource
win10v2004-20230703-en
General
-
Target
ba01792bb975a5c74fcf66da091e113c95f5653296e63250772472dd7c9a2086
-
Size
346KB
-
MD5
2c1c5b3a8876a767807f1d55a0620d98
-
SHA1
1f4e727ce7babd04385c1c6723c7dfe2e4bf9284
-
SHA256
ba01792bb975a5c74fcf66da091e113c95f5653296e63250772472dd7c9a2086
-
SHA512
9760d6c235f215576b13feb384711a5bf215582f84671af60321f2dd33fff36d5119b20a863ac149308511a24a4f0db45ba6136fed3db39a3bd5cfbd72b996b4
-
SSDEEP
6144:+Rk9NrU+9DUx99SD9j99i99CxF3cKWTj/p9a9jisJuqACzhdoSF:gk9Nr59DUx99SD9j99i99CxF3cKWTj/4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba01792bb975a5c74fcf66da091e113c95f5653296e63250772472dd7c9a2086
Files
-
ba01792bb975a5c74fcf66da091e113c95f5653296e63250772472dd7c9a2086.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 341KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE