Behavioral task
behavioral1
Sample
bc3dc286b2c3068e9483c35b81610f58.exe
Resource
win7-20240221-en
General
-
Target
bc3dc286b2c3068e9483c35b81610f58
-
Size
145KB
-
MD5
bc3dc286b2c3068e9483c35b81610f58
-
SHA1
44d21bc310234a2d026e7af3fc1ba7c56888ab67
-
SHA256
55f1fad4a1a70d3877a986957cce8f7bd8ec2b429150299a6c4ed1ead5d33e6f
-
SHA512
1f2c85ef056148c69391e6b9519e89355840b39cd0660e8275424f1fc4083ed54dc32f8e39ee5c82951d548c4a666c0eee8670ff1f87f4f9d1dbb278d6fdd23e
-
SSDEEP
3072:sOxtKfasWVDVrlGlEkfjLk1SebGQQeKNYydadMMDd/f05MoutjB77777J77c77cQ:sOzKLMVr8LfjWbG+ZMgdfjoSjB77777C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc3dc286b2c3068e9483c35b81610f58
Files
-
bc3dc286b2c3068e9483c35b81610f58.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE