Behavioral task
behavioral1
Sample
bd3ae21950c98ba6d135d5bab3a2c487.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd3ae21950c98ba6d135d5bab3a2c487.exe
Resource
win10v2004-20240226-en
General
-
Target
bd3ae21950c98ba6d135d5bab3a2c487
-
Size
42KB
-
MD5
bd3ae21950c98ba6d135d5bab3a2c487
-
SHA1
0ab399815e42b51f179773caaac6646c89bc17ec
-
SHA256
e53a354230b51004ada27f5d93349831bb7a8d37ca891ca7d8eb5a552f561f08
-
SHA512
793ce710fa5e2a0ca87b53f7d2fd2595c09864f2923d738afad5d5693f7877459140bb342431169cbc024b9695a06901b309c8826a77984f37422d20caab2bbd
-
SSDEEP
768:LQvVsSiY+jSgveHWnJANujgz+up8e/S8WRKAzLT8fLFtUTZVVuW3Q:kvVRTHgvyWnJq/FWRKWsjUTZDusQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd3ae21950c98ba6d135d5bab3a2c487
Files
-
bd3ae21950c98ba6d135d5bab3a2c487.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE