Behavioral task
behavioral1
Sample
bfb7ce840ecfe1adcbcc1023187ec248.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bfb7ce840ecfe1adcbcc1023187ec248.exe
Resource
win10v2004-20231215-en
General
-
Target
bfb7ce840ecfe1adcbcc1023187ec248
-
Size
2.7MB
-
MD5
bfb7ce840ecfe1adcbcc1023187ec248
-
SHA1
ac8f8f66df6bf917b83815ad930588105518b0f8
-
SHA256
f5c67a21c3aa7fe8342856d44e3eb3aae833c7f1e9c692002dcf9ce14657efbe
-
SHA512
c51873f72e6f3a4fe8ebd9fde7ead9a0dd3dc83378f61847b3e0452128e2a204d5f0c4f44b77e0a42e70a8e976e6da5be250384224bf027b3ada782b404e6083
-
SSDEEP
49152:dKRwfzJwRdo/Sdrw5toaDQmLEngldER9q9mDRmmjh6iB7SRTb/DcpTkBwkqjR9j:dj1smKkt5XYgTEHq9m1N96iBYTvqvHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfb7ce840ecfe1adcbcc1023187ec248
Files
-
bfb7ce840ecfe1adcbcc1023187ec248.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE