Behavioral task
behavioral1
Sample
ba10854657d0090ce097a298f46c8abe.exe
Resource
win7-20240221-en
General
-
Target
ba10854657d0090ce097a298f46c8abe
-
Size
597KB
-
MD5
ba10854657d0090ce097a298f46c8abe
-
SHA1
d93da0f1be71cd78cff28369528123a1f1f4e34d
-
SHA256
edcc80df05e3645c7f44345c9e62603bc4a6ad83dfaf048e57722125ae7d5dd5
-
SHA512
4f5981923f480dd33dd29a64878de9b555199a12a87124a605ab740a0244e515835e023622e551177deef43e646aecf73e8b0f40bb4ad53e054c733fb3ffaf3f
-
SSDEEP
12288:wJz0TrCqVM8UoAs4fg4xbFs9lLaAgev1pS4aCkFdqri9VWQMkbx/yMFqNfuy:MirCkUo8fLBqmze9pS4a7qu9VdMkbIMe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba10854657d0090ce097a298f46c8abe
Files
-
ba10854657d0090ce097a298f46c8abe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ntq Size: 512B - Virtual size: 4KB