Behavioral task
behavioral1
Sample
ba64e9d78d4f8f65b345eb1f8dfba6b2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba64e9d78d4f8f65b345eb1f8dfba6b2.exe
Resource
win10v2004-20240226-en
General
-
Target
ba64e9d78d4f8f65b345eb1f8dfba6b2
-
Size
412KB
-
MD5
ba64e9d78d4f8f65b345eb1f8dfba6b2
-
SHA1
fffd3ebb564a13a0659a9e38787cee759966439d
-
SHA256
21094c13c09ffe08a9943603b4c119e877f96eaa1f9f135faa527e7c95b3529f
-
SHA512
2e77ccad14869a529ba565d61355eb494e91739e4f551bfd7f087c0381a8132db5fe905fcc96b2b09fe97524c68eecd08d32c765c1f3c5b340059f8e37416108
-
SSDEEP
6144:mDw75aw0gzAptbKDnOGtqpFLT4lkkDyZbRNL6x9ySpKz+7qlOIW+B77777J77c7n:Owtaw9z6uaFv4jOZbugSpS+U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba64e9d78d4f8f65b345eb1f8dfba6b2
Files
-
ba64e9d78d4f8f65b345eb1f8dfba6b2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE