Behavioral task
behavioral1
Sample
ba9bec29269eeae11bd774bb9878698eefe9e5681ccb5e41faea08255c96403a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ba9bec29269eeae11bd774bb9878698eefe9e5681ccb5e41faea08255c96403a.exe
Resource
win10v2004-20231023-en
General
-
Target
ba9bec29269eeae11bd774bb9878698eefe9e5681ccb5e41faea08255c96403a
-
Size
4.9MB
-
MD5
bef936e0f52f74471ed4f892c4aed4ed
-
SHA1
fdcab51035a4bef3767259e653d2e5bdca4fbaa3
-
SHA256
ba9bec29269eeae11bd774bb9878698eefe9e5681ccb5e41faea08255c96403a
-
SHA512
a9a3f15ea9725c4fa40f2426d3c90aa6811e1e8ba063e69dab31391a223862a5c245ca7db6948ba67f5e94357ee61e38f3ac215eb04dc0fbe54d561dc3eccad2
-
SSDEEP
98304:YdK+LNVmvsMdGcqWIkDwSqyJRPB2H6iuNMWUtzRi/BY6TDj:Y3D7MdwktlRQaz27i/G6Tv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba9bec29269eeae11bd774bb9878698eefe9e5681ccb5e41faea08255c96403a
Files
-
ba9bec29269eeae11bd774bb9878698eefe9e5681ccb5e41faea08255c96403a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.7MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE