Behavioral task
behavioral1
Sample
bf11315e03a04d4fb25df4afd30fec2aa2fe09b1a36cd9e74bb1c310f47a6d69.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bf11315e03a04d4fb25df4afd30fec2aa2fe09b1a36cd9e74bb1c310f47a6d69.exe
Resource
win10v2004-20230915-en
General
-
Target
bf11315e03a04d4fb25df4afd30fec2aa2fe09b1a36cd9e74bb1c310f47a6d69
-
Size
8.2MB
-
MD5
4de32098728080dcd9fd453df0244396
-
SHA1
4aebc3ec74f06417e27cafe2ab9bb0f05f2cacbe
-
SHA256
bf11315e03a04d4fb25df4afd30fec2aa2fe09b1a36cd9e74bb1c310f47a6d69
-
SHA512
b0b43eb0d702a32498dd82f93617f3c182fdaad726809cf970e2c8e877f6327026320552c14b6178dbb8cf0312e144214f05ef5091d76cd5d201684767b575b1
-
SSDEEP
196608:I6EC1zjn/AXMwPlaLdLBKFC6mZIfOigFgGXJzuH:FDjn/AlP8Ldh6SIfOigRzk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf11315e03a04d4fb25df4afd30fec2aa2fe09b1a36cd9e74bb1c310f47a6d69
Files
-
bf11315e03a04d4fb25df4afd30fec2aa2fe09b1a36cd9e74bb1c310f47a6d69.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE