Behavioral task
behavioral1
Sample
bfe3d856763ebf8354bfbba7954ce530_exe32.exe
Resource
win7-20230831-en
General
-
Target
bfe3d856763ebf8354bfbba7954ce530_exe32.exe
-
Size
368KB
-
MD5
bfe3d856763ebf8354bfbba7954ce530
-
SHA1
ab8acd8902350a08e0f9adec39e4bc08d4a07629
-
SHA256
c58b503fe2771cbb651d88c3a7540fe7589e96f872c5533a0759d9d2a32c5b75
-
SHA512
9f66b6376509275e49164833564d65c56afef5ccbd51561872f0ba0c9ff23616649ad84b3e08a5218d94b441a9eff7a4a68c52001d6054caa8c8aa64ad103071
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOFltH4tiAlSpgFZAzwdjcIlSpgFZZr3GSsdA:y4wFHoS3eFplAlSpgFZAKjcIlSpgFZZV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe3d856763ebf8354bfbba7954ce530_exe32.exe
Files
-
bfe3d856763ebf8354bfbba7954ce530_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE