Behavioral task
behavioral1
Sample
ba74564b4e6bcb9031e3cd7a711ed07f.exe
Resource
win7-20240221-en
General
-
Target
ba74564b4e6bcb9031e3cd7a711ed07f
-
Size
784KB
-
MD5
ba74564b4e6bcb9031e3cd7a711ed07f
-
SHA1
f4fbdae6bdf114e2003d9b80561a0d6e841ea852
-
SHA256
8de680a626b5e4c79fe0d84c02079301007ddd90edf6c0865837cca486389c1f
-
SHA512
841f49309c34b8f753bc9a02ea18243f2437c52a0534f2a756743025828e2bdf90bc5dec1323c20ea323ba64d29cec74bba2c295d4649a01bea27adb8affe73c
-
SSDEEP
24576:MxRNFO8mzltpnayNRJoQRSwv1KVFhVgnJ:MN9UtPNbhRztYFEJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba74564b4e6bcb9031e3cd7a711ed07f
Files
-
ba74564b4e6bcb9031e3cd7a711ed07f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE