Behavioral task
behavioral1
Sample
baa1b2c4408de2ffc6fe7f5bec9eaead.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
baa1b2c4408de2ffc6fe7f5bec9eaead.exe
Resource
win10v2004-20240226-en
General
-
Target
baa1b2c4408de2ffc6fe7f5bec9eaead
-
Size
3.9MB
-
MD5
baa1b2c4408de2ffc6fe7f5bec9eaead
-
SHA1
4dd710af3a1bc15565267339660bb42c31b9f5a2
-
SHA256
e0e57d7ff8d7c50b667876be027ebeca8b8d4c5251379bb765f0e41b12efd93e
-
SHA512
36793fe74bea897b4293a060a50f1fdf829c6d1b2b5780c910b271d922ce9a783c3ad861dd676538a8ddc4e48e844c427d40140241ec5cf954ee66cf0e5037c6
-
SSDEEP
98304:F+s9rk5GBXqVdKgg3gnl/IVUEZboUNabSRZGT1BGgg3gnl/IVUV:7k5GRIdegl/iVZkFbSS1Agl/iG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa1b2c4408de2ffc6fe7f5bec9eaead
Files
-
baa1b2c4408de2ffc6fe7f5bec9eaead.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE