Behavioral task
behavioral1
Sample
baa5f09ed3d64a6290e29429a0dfe324335de6a37be073422e4587f91fa81ac4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
baa5f09ed3d64a6290e29429a0dfe324335de6a37be073422e4587f91fa81ac4.exe
Resource
win10v2004-20231020-en
General
-
Target
baa5f09ed3d64a6290e29429a0dfe324335de6a37be073422e4587f91fa81ac4
-
Size
4.9MB
-
MD5
7ce273cd2fd564afe6a6e77ac078227c
-
SHA1
da8efc2c00c9505d7ac0da70ab393370b8d20b3c
-
SHA256
baa5f09ed3d64a6290e29429a0dfe324335de6a37be073422e4587f91fa81ac4
-
SHA512
a612ca5a4314b09953cfe2852cb54bae80b99c87e12db7b0abcc2c4b3ff4d5921f6af00bd2f9caa55a401aabed3b08c24c9d61977a3ec51f849e75c4f86162b7
-
SSDEEP
98304:uh+scLmccjRXxll2NW0GUG+7WyPKHZIXUrArRpOyoIH405l198OF:ZvLL89l4nGLl0UrWpOGHZTxF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa5f09ed3d64a6290e29429a0dfe324335de6a37be073422e4587f91fa81ac4
Files
-
baa5f09ed3d64a6290e29429a0dfe324335de6a37be073422e4587f91fa81ac4.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 938KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE