Behavioral task
behavioral1
Sample
bc09cf028f2f0ed06601e98d32048940.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bc09cf028f2f0ed06601e98d32048940.exe
Resource
win10v2004-20240226-en
General
-
Target
bc09cf028f2f0ed06601e98d32048940
-
Size
5.3MB
-
MD5
bc09cf028f2f0ed06601e98d32048940
-
SHA1
3ea0154f754caffb43942a9ac1d5bb7d090634e4
-
SHA256
21b2af02a648b9188cb8d80142f828851dec54c2cf2bd708dd9e1c1a543f369e
-
SHA512
b8ddba14e2f100b0ab9e20163d109f7a690967f2b6e57272ce5a6e905439e2c96a4a748364d1098774b9d3877e0e375bfd42e0604fd659f11ee5f4b17403e408
-
SSDEEP
98304:hm4shgYZ6MI6ur6tvy1aMUvzp+umg+piur6tvy1aMUp:hmhaO6MIpr6oEMyor6oEMe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc09cf028f2f0ed06601e98d32048940
Files
-
bc09cf028f2f0ed06601e98d32048940.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE