Behavioral task
behavioral1
Sample
BP code calc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
BP code calc.exe
Resource
win10v2004-20230703-en
General
-
Target
BP code calc.exe
-
Size
222KB
-
MD5
977b7255da0992a6a43d91492452a0b9
-
SHA1
c566c9a519e9c7fb3a23533977e5c448161ba2ee
-
SHA256
d763771ee40c088f71d6ea5ca94052c48bf8740950fb923c8ad81154c943aaa6
-
SHA512
3b4d8ef485b7bf2fbfd78e3ac40678a974aaed9114dcb0e0cf50e957dd5dee92c1a33d2567074d8a83b26ea52283dcfd74e7e1a8074f9f0d5fb48e0039225fc8
-
SSDEEP
6144:i/tDvnkMMtaD99RGbf7v3UfB4aqhO7zeb9r6+dMHNZt2FTGEavD:iNJMtaBOEfeaqYqr62MPAT0vD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BP code calc.exe
Files
-
BP code calc.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE