Behavioral task
behavioral1
Sample
ba4c4195d31d696ae982c3408647a55b.exe
Resource
win7-20240221-en
General
-
Target
ba4c4195d31d696ae982c3408647a55b
-
Size
2.9MB
-
MD5
ba4c4195d31d696ae982c3408647a55b
-
SHA1
44eebf9d0d693ebbe1f6ffa01d05ad344902eae0
-
SHA256
204a586129e3ae119d1a56aa074abb5f09d9819aa3042887b60cc6454554a667
-
SHA512
42898760ea2ed08ee10a70663ad1933d1ffc05a6618af41977c45291dffc861071794e1ef36506a56b26fb1a9673b4977cc9470dd1e870eee999092eec99eca6
-
SSDEEP
49152:W8zCMDSgDI8PuVioHnBtB5xXinHsjp/win1L89LsuCjcP0W6gXcqmNzEwwDNdJi5:V2MDSgohFxyQ/b1LmLtLYbNAdHiUeB8r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4c4195d31d696ae982c3408647a55b
Files
-
ba4c4195d31d696ae982c3408647a55b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE