Behavioral task
behavioral1
Sample
bcb55767f739d985ffa76a0ac64d4bb7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcb55767f739d985ffa76a0ac64d4bb7.exe
Resource
win10v2004-20240226-en
General
-
Target
bcb55767f739d985ffa76a0ac64d4bb7
-
Size
17KB
-
MD5
bcb55767f739d985ffa76a0ac64d4bb7
-
SHA1
f37b3ba42613fd00ed230a5b3286d81242c7ef61
-
SHA256
dde375daa9aae1deb661a3220f6b3feb5873546b7a5cd4dd1212d8580bdb5f0b
-
SHA512
4e0305b2a067b199fe2fe15577f1c1593037e4074253f8edf915f0c4bf2035fc4f508188df6653c3ec0e900f5907dae889ef03cde46b96691aed90c3192b12d0
-
SSDEEP
384:JYFRJJj8gtkQtxjRVNp+PtUVqI2SvZBft:JYFXJj8Mj3NsQqIFZBV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcb55767f739d985ffa76a0ac64d4bb7
Files
-
bcb55767f739d985ffa76a0ac64d4bb7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE