Behavioral task
behavioral1
Sample
bc898c2969b9c679562526ff1cf45e49.exe
Resource
win7-20231215-en
General
-
Target
bc898c2969b9c679562526ff1cf45e49
-
Size
784KB
-
MD5
bc898c2969b9c679562526ff1cf45e49
-
SHA1
1d62eb65f6088f5cfc04c4361523c781484a3e8b
-
SHA256
7b57ecfa021be7c95ff5c753f81f5b01136f49f79b7bdb0baf3da948b0ff794e
-
SHA512
4670e2bb7967def581e8f90ffece037e484431ffc55a480e06795c645ac91c6f2dbc9a9ebb350bc5a7dafeab91187283fc7f2bee8492d3f15b6a5e64966216a2
-
SSDEEP
12288:7gHnKG7ChCHxLeTdP54eongTsOnVYfVJVgIawsLzF/mD9FSIsnD1eK69WeAzDoyS:EqG+ALKBpongTsOqfQzBmD9FwqUxoy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc898c2969b9c679562526ff1cf45e49
Files
-
bc898c2969b9c679562526ff1cf45e49.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE