Behavioral task
behavioral1
Sample
bc15888e8c0937fc80337771270bd2cc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc15888e8c0937fc80337771270bd2cc.exe
Resource
win10v2004-20240226-en
General
-
Target
bc15888e8c0937fc80337771270bd2cc
-
Size
5.8MB
-
MD5
bc15888e8c0937fc80337771270bd2cc
-
SHA1
a3d6e650b7f8d4d63897effeb03a37c6c0029179
-
SHA256
0d8455a779c4c7ed71fc1d77294d26092c5ee38a217b30f56c365ae8e267d7c6
-
SHA512
8c6e2ffe8076ca1353b7f754e393c5977c9e137af9d45354c7fc00ad84d25d71908dc18ab5adba5979fc87eabb2bb2ef6dc3ca834ae27d786a90d4a31a9932d7
-
SSDEEP
98304:4kMJPnzj0dUB/RU/4HBUCczzM3Sm+iCZ3Fj5ceYp5Bw+J4HBUCczzM3:XqlRUQWC+ia3FGeYp5qhWC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc15888e8c0937fc80337771270bd2cc
Files
-
bc15888e8c0937fc80337771270bd2cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE