Behavioral task
behavioral1
Sample
Bully.exe
Resource
win10-20240214-en
Behavioral task
behavioral2
Sample
Bully.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Bully.exe
Resource
win11-20240214-en
General
-
Target
Bully.exe
-
Size
2.2MB
-
MD5
ad2bb5452bd6b181e38bc200fedce3d6
-
SHA1
a891698bc2157ea7460c2f840363212e75828903
-
SHA256
ccfa258630aa706eb77ea69668accb6bb8d28623006ab2858506a9552f2ba2b3
-
SHA512
fd858a09dc3d012a37b43ce8ac4bbafc9612fccba6379b5e73cc4ba571301b60d81642e3efb52d3872bd6b6f3be3e4663a026fa8fb3a24d909c54db4f303c19b
-
SSDEEP
49152:b3J+bd4EpNrQ0hq0V7IP0x9Sd3d9Huy7C42+FqoGB:TJ+B4eNxq0j69HAH+YoGB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bully.exe
Files
-
Bully.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 26.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE