Behavioral task
behavioral1
Sample
bd1e1f0b0cdb89c5c4923625dac11873.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd1e1f0b0cdb89c5c4923625dac11873.exe
Resource
win10v2004-20240226-en
General
-
Target
bd1e1f0b0cdb89c5c4923625dac11873
-
Size
2.6MB
-
MD5
bd1e1f0b0cdb89c5c4923625dac11873
-
SHA1
a7975ee9507347b01dc14fc9d86ede8837768bcd
-
SHA256
4a66ea55e77afdd96eac8a7a4b462c4a83ea5e49141e151024cbaa9518474e9f
-
SHA512
faced09f115d30bd491cdfdb440f67ee728f71e2b9b398296a2a634240b13433f66d3c92bcd32335d320f9c4be61f91570c27a62738c1c64fd91368bbea22bc6
-
SSDEEP
49152:SSsFAuaK0pCYMqmyy9COs0jP95dpR3fCSmjIay3:S+7K0wp9XF13
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd1e1f0b0cdb89c5c4923625dac11873
Files
-
bd1e1f0b0cdb89c5c4923625dac11873.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE