Behavioral task
behavioral1
Sample
baa67f9548681d62eb165305434fc419.exe
Resource
win7-20240221-en
General
-
Target
baa67f9548681d62eb165305434fc419
-
Size
784KB
-
MD5
baa67f9548681d62eb165305434fc419
-
SHA1
6e2cf330398b58685b6a8aeeca73e68c0202d026
-
SHA256
cd6722a2f2398872cbdc3c2248c509ddf091502411d2dc2ab173f1e2aa8ca512
-
SHA512
d0497fa329e6986e989ae109e6efbfb42cbbe2093ad2145b550b3027f84536600e84455bb2ff96befa67de02e81cfe24ec7adb840b14fbc404e11dc0a1be615c
-
SSDEEP
24576:SB5iVZ/TWNVT5z619QA1P/hZH7QWsm2mOVYDV/pzcmL:qiVZ6NVT1tARH7QWn2DV6/pz5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa67f9548681d62eb165305434fc419
Files
-
baa67f9548681d62eb165305434fc419.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE