Behavioral task
behavioral1
Sample
bf4069d1451a4fef470125f3984cd32a.exe
Resource
win7-20240220-en
General
-
Target
bf4069d1451a4fef470125f3984cd32a
-
Size
784KB
-
MD5
bf4069d1451a4fef470125f3984cd32a
-
SHA1
973926776a91725a205af335863cda3cbd89b8f2
-
SHA256
a5917f5fa30c25cfe558e8c3415eab062cb26f64fa5225e5ca8ae83cd3ab2310
-
SHA512
9b532929a1da51560c3b41c843a014b022a178da18fcab7d406816b4f0ef7e8a6e98e3f58ec8bc5615db9440e23e90137d46b4203eb94a856f95de2011f5dff0
-
SSDEEP
12288:qBtyvZf0xszc/ZqV6XYToykaQ7Fk8m1JDFiFPqyy8+YqyN2ZujferM5VlIzxZk:qBtyBf0xQoMTbQ7FcJR8iUJpfewLlm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf4069d1451a4fef470125f3984cd32a
Files
-
bf4069d1451a4fef470125f3984cd32a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE