Behavioral task
behavioral1
Sample
ba1a7644f2b2fe39a284265ca9e8822c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba1a7644f2b2fe39a284265ca9e8822c.exe
Resource
win10v2004-20240226-en
General
-
Target
ba1a7644f2b2fe39a284265ca9e8822c
-
Size
5KB
-
MD5
ba1a7644f2b2fe39a284265ca9e8822c
-
SHA1
e8ee836c54830e529b5ec453608da8a73f5c7d96
-
SHA256
dccda269caf3e31f81efe44cf0a0e37baa2f9ceb5575b6f08187cae149bff828
-
SHA512
7a41d6d973bd5a1e361cf06ae9e13379513e0aae18bf090ba36c084ef275903a77e1dae473c91e74f3baf5d7963133b5bfd630db0b8548278f93c4a98e815c97
-
SSDEEP
96:sJ+pHvAt3PvDSyivAo0fvek2V34RueYPYKAzvuoFgmvM3bl1nwXC:sJeGf7SrAo0Vc3KuewzWuoFDy5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba1a7644f2b2fe39a284265ca9e8822c
Files
-
ba1a7644f2b2fe39a284265ca9e8822c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE