Behavioral task
behavioral1
Sample
ba8b459eecbf4f2cb3a0d2db59ea59ea.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ba8b459eecbf4f2cb3a0d2db59ea59ea.exe
Resource
win10v2004-20240226-en
General
-
Target
ba8b459eecbf4f2cb3a0d2db59ea59ea
-
Size
133KB
-
MD5
ba8b459eecbf4f2cb3a0d2db59ea59ea
-
SHA1
9955914702b91a29e5dbe69378babcb9ba960f33
-
SHA256
59c3e50457b40984e60c9d1c737601ed6dff89804f1ae2461ef7bce7c0a721b7
-
SHA512
338566c1512905b09a8cf04e3f93e348e02491cfef952768eb8bb231a5f0718dd1ac896190e404b54ac76bff86b8707bb09c960a6da567e0ebe201ea9309c0e8
-
SSDEEP
3072:Xx92hThS26dsy051I4uvJLmta7Gf5/XUovqOQ:X9Ldlg1YJKY7Gf5hXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba8b459eecbf4f2cb3a0d2db59ea59ea
Files
-
ba8b459eecbf4f2cb3a0d2db59ea59ea.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE