Behavioral task
behavioral1
Sample
ba92a60a1bf1ff490fecf34538f1415a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba92a60a1bf1ff490fecf34538f1415a.exe
Resource
win10v2004-20240226-en
General
-
Target
ba92a60a1bf1ff490fecf34538f1415a
-
Size
7.8MB
-
MD5
ba92a60a1bf1ff490fecf34538f1415a
-
SHA1
b93df7c9002c90533a0900050bcdc921a05f5f46
-
SHA256
d80a180df62aa1fe7ba832db072ad2a03a1674a5d3d8cd3ff98762e5b94e770c
-
SHA512
6bc4d54cdd7885d21506f871b453a2ef8fcb469744c7a06b13e0c2bb2f634ade336e973428a14f303de0dd6a91f571ea4fbdae842231dad242e9b530327efc5d
-
SSDEEP
196608:c/i6h3Csyh7FkNqKipIRh7FkNqKkZLTu3ah7FkNqKipIRh7FkNqK4hqh7FkNqKiS:c/5h3Cs07upqID7upkZLT6M7upqID7uQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba92a60a1bf1ff490fecf34538f1415a
Files
-
ba92a60a1bf1ff490fecf34538f1415a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE