Behavioral task
behavioral1
Sample
bc0af8530186b7cc92e71a215612610f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc0af8530186b7cc92e71a215612610f.exe
Resource
win10v2004-20240226-en
General
-
Target
bc0af8530186b7cc92e71a215612610f
-
Size
122KB
-
MD5
bc0af8530186b7cc92e71a215612610f
-
SHA1
1c8b2d2590932da4d28ece0271bb3c4cc2abc1f3
-
SHA256
6536410dd7821785a670f80482bbd91f2d6a207ec46bf9427614df818d65295b
-
SHA512
35d0a2560f14b2ccc5a64b30af5d115ee7ff5035f752f7f286144e919f4d6c0b3db2df1029d1b7521a29e4d2564f53ec47e1f323a105ad8a8c6788c16e182e1f
-
SSDEEP
3072:7ZJeJgqs+4kMcvMM0RVT5ATnsJbJRng6aPxs3Iu1Fnouts:lJeJv4k1vMRT5kaDnTYxDu1FnoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc0af8530186b7cc92e71a215612610f
Files
-
bc0af8530186b7cc92e71a215612610f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE