Behavioral task
behavioral1
Sample
bc912d691344326e3cbcb7b32be7db05.exe
Resource
win7-20240221-en
General
-
Target
bc912d691344326e3cbcb7b32be7db05
-
Size
784KB
-
MD5
bc912d691344326e3cbcb7b32be7db05
-
SHA1
588c193c7cd6f7220d90892b9fa8df51f5a980bc
-
SHA256
8581ca48e862d56fa93dc407719abc79bb88a2a245c6f0ffe4469cda5738982a
-
SHA512
7b166dfe0af8c0f9fc9a7d1ca287811b9a963edfc31c64745e338e1447f1142e68ca1b2e841fa8f61e4b359515b3d4aa757d5f0c16f84f5c021907c9bc12c065
-
SSDEEP
12288:GTxbq5M10HQ9FltzqrD5xoj1/NueLdzrnasepsOe03eUZx1l5jbmhbMAL2nPVhtJ:GdMg9FlVKs1luYzrnUpES5xxShbeh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc912d691344326e3cbcb7b32be7db05
Files
-
bc912d691344326e3cbcb7b32be7db05.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE