Behavioral task
behavioral1
Sample
bf9a5a2e6de3b770a5ddaad6da732660.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bf9a5a2e6de3b770a5ddaad6da732660.exe
Resource
win10v2004-20231215-en
General
-
Target
bf9a5a2e6de3b770a5ddaad6da732660
-
Size
10.6MB
-
MD5
bf9a5a2e6de3b770a5ddaad6da732660
-
SHA1
5380af6b833a71fabaf34a8ed45912b7901af7d3
-
SHA256
84d278a57c748f0b4300b17d60317f9fb6434a7f67e0ec00b399ee219b9c26b5
-
SHA512
e8e59037ac77f8ba4fdce56a1eb58f80591f7eb0db86ced778e8b2af5fdddc348bd62912f244b5f1c769d84954ffd89e04b53740eb8fb05cc01359499d559e8b
-
SSDEEP
196608:UB2hYK1Dynpei8w64+bDyHHoYK1DynpeI1O0EYK1Dynpei8w64+bDyHHoYK1DynQ:31DyB2VfyU1Dy/O0I1DyB2VfyU1DyQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf9a5a2e6de3b770a5ddaad6da732660
Files
-
bf9a5a2e6de3b770a5ddaad6da732660.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE