Behavioral task
behavioral1
Sample
bcc10e73f9855f21ec8bfd99adb3539c5064cac6008a37998d16b57310f2bb3e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcc10e73f9855f21ec8bfd99adb3539c5064cac6008a37998d16b57310f2bb3e.exe
Resource
win10v2004-20240221-en
General
-
Target
e195699ad0301c995aa5ccb69059759d.bin
-
Size
533KB
-
MD5
1ba386e5ba59e4f67a3cea0fb9564dc4
-
SHA1
beaab279ae3e19449b0ae4fe8078ce8404b32922
-
SHA256
38b0a215b6c4d603d80f9382fe97e69355064720da2456d7d42877e090f37dbe
-
SHA512
f92e06f6bfcc81d7ad38c78b3717cab8bf5fa678cbaff212cf2222cd0d822605a42420773a77fc6296bcffdce7cd8ea391de508693f84aaba0302d6262884d68
-
SSDEEP
12288:4BbYT1LhY572eivJdyM8htyAVeBXNKfpYYfC68MYQ:qYT1lY5aei/ydhleBXI6GR
Malware Config
Signatures
-
resource yara_rule static1/unpack001/bcc10e73f9855f21ec8bfd99adb3539c5064cac6008a37998d16b57310f2bb3e.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bcc10e73f9855f21ec8bfd99adb3539c5064cac6008a37998d16b57310f2bb3e.exe
Files
-
e195699ad0301c995aa5ccb69059759d.bin.zip
Password: infected
-
bcc10e73f9855f21ec8bfd99adb3539c5064cac6008a37998d16b57310f2bb3e.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 896KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 475KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE