Behavioral task
behavioral1
Sample
bbaec0f36a22dc0814d3118b55a6d9ad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bbaec0f36a22dc0814d3118b55a6d9ad.exe
Resource
win10v2004-20240226-en
General
-
Target
bbaec0f36a22dc0814d3118b55a6d9ad
-
Size
328KB
-
MD5
bbaec0f36a22dc0814d3118b55a6d9ad
-
SHA1
b470481167c1e5a5f995a2344a975aad0ea003c8
-
SHA256
b2f5681697ec63f0b465f11eca03c5e9ef35284346a9c0a762ea286bbe7c7272
-
SHA512
ddbe93b5cc5ea4cc334fe154b35c16355ce96f1625cec96c2623b71b1732ad86c3ecc2972d31c3afa92ad272eb6e6b5a8e34c89cd02bb0b9db2cf6b220ad34d0
-
SSDEEP
6144:YSYaPrGVl7N2JtI1DaikGJlL6AuawMSp5xbze9s5dkbcFhNNueRIHioS:vYaPA9MK48l+Y1axvYs5/FvNuNCoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbaec0f36a22dc0814d3118b55a6d9ad
Files
-
bbaec0f36a22dc0814d3118b55a6d9ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE