Behavioral task
behavioral1
Sample
bcdf0ba88447fd8d82be1956aa50f9f8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bcdf0ba88447fd8d82be1956aa50f9f8.exe
Resource
win10v2004-20231215-en
General
-
Target
bcdf0ba88447fd8d82be1956aa50f9f8
-
Size
133KB
-
MD5
bcdf0ba88447fd8d82be1956aa50f9f8
-
SHA1
7fc2992f4139dbb6177bfa1ea087ce0fe2574565
-
SHA256
8c570870380372bcb3613b877b0011316c8fee7569eab6aa40ded44b00450f91
-
SHA512
359c52ca1b2379f941c6803e64f718c856c48eb976190ef0d586dc142bbe22b85e477e6b4d378cdc6532c881dc4cdefea2b95f43f848d284039fbfd8bd1c8a5a
-
SSDEEP
3072:GUh4juxpxhFzc3m2dpePy5x5kXtXpxCBXfEIEowaK/cJFBQ:eijFzsB77kXtXfEEG5jQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcdf0ba88447fd8d82be1956aa50f9f8
Files
-
bcdf0ba88447fd8d82be1956aa50f9f8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE