Behavioral task
behavioral1
Sample
baf085054a7fa2230325f2c03b696a26.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
baf085054a7fa2230325f2c03b696a26.exe
Resource
win10v2004-20231215-en
General
-
Target
baf085054a7fa2230325f2c03b696a26
-
Size
133KB
-
MD5
baf085054a7fa2230325f2c03b696a26
-
SHA1
d7d566f63d8ab04a035ef8a2b7a15ec96d5d0a81
-
SHA256
5795899cff4efef1bd0c25907c00978aa99d027c76c888ebd4b58b485d0365d4
-
SHA512
8510495d84bafa2d036f5b9ddce8bed069221846b1cd7b85937db35fd739a473eba5daac11bc9c118ce58aad24c3364cc2d8ea041f4035b4e63c1061e9117ab3
-
SSDEEP
3072:y/xsRC687IbtEFabd1W5u0J50sYGRRgrA/nSRQQcy4TlTHDpHl77Q:y5RO0gzWMY0sYbA/nNQcy4TlTjpHV7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf085054a7fa2230325f2c03b696a26
Files
-
baf085054a7fa2230325f2c03b696a26.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE