Behavioral task
behavioral1
Sample
ba2d5b31b43841be186258fa77a7f00c.exe
Resource
win7-20240221-en
General
-
Target
ba2d5b31b43841be186258fa77a7f00c
-
Size
784KB
-
MD5
ba2d5b31b43841be186258fa77a7f00c
-
SHA1
e76e103a880f1178c9302bd203cc650bf02f9f3d
-
SHA256
10f3cf7f6ee969324d46a00d2a184a345f0612a5bd7f156dbbe137809aadd737
-
SHA512
f43eb57768af138b6b1cca5e5ed242b8ef556dd22bf6c31328f22194ac59491c4593eb5a0e79125a281fa0c1aaebc5fe08e89678b561ac61359b552ecdaeea34
-
SSDEEP
12288:2RtMd12MtZkUs7zhyY0fnUpCi/BTGdsbqBktcelHs42rw5NUXTiZL2wRySve6k:2aFZkBHhyDnUpTIdeOexGE5LqwRZu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba2d5b31b43841be186258fa77a7f00c
Files
-
ba2d5b31b43841be186258fa77a7f00c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE