Behavioral task
behavioral1
Sample
bc368b4ec0a7f4d5795a5953ca4964f7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc368b4ec0a7f4d5795a5953ca4964f7.exe
Resource
win10v2004-20240226-en
General
-
Target
bc368b4ec0a7f4d5795a5953ca4964f7
-
Size
48KB
-
MD5
bc368b4ec0a7f4d5795a5953ca4964f7
-
SHA1
8ca09e128b375506a47b4702c4ef5b7c0336fd4b
-
SHA256
4f4221bd9475d771f3d749dc8c033a0d732c84e99ca6ee8e8947bb2d3f237e25
-
SHA512
84e94e085dddfdd96d52f599d7e99cbc85549978c5557460546fe1d8141507dd03b1b55b9654a709850a8ba013c3a0843460874dc7eb5def98894b6316d34b73
-
SSDEEP
768:zgcGhwtOwyWhlTNzgefEj4cIskPQuaSs8euO9RT2T1n1RnmLXah72cqSKzVn0YnZ:xvt6WnTNzg6E8/sqPsnn6Fm+1SF0YnoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc368b4ec0a7f4d5795a5953ca4964f7
Files
-
bc368b4ec0a7f4d5795a5953ca4964f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE