Behavioral task
behavioral1
Sample
bd3ec3efc5d61982616d7b5c4888554e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd3ec3efc5d61982616d7b5c4888554e.exe
Resource
win10v2004-20240226-en
General
-
Target
bd3ec3efc5d61982616d7b5c4888554e
-
Size
1.8MB
-
MD5
bd3ec3efc5d61982616d7b5c4888554e
-
SHA1
d6e6552203159eec7274f9015fe89018b4d4776c
-
SHA256
b2ebddf3b62c9b4acd6d6ee3871921ceb6b563ab1821f70767fe6deb0ae32fb8
-
SHA512
81c64767d0947d81f7835da9864ec7bbd9e072897a6ef64433bd2ce1e4124fbed9555ca82138e54add30e2b152012b200e35fa6f7dab3b84d9fd7cd816451056
-
SSDEEP
49152:hcm6ul59YTUMf1DXrOo/Ka4QtQBkmRV1tShP4nswx:am6w5aTnrOjahc/RV1tShAsw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd3ec3efc5d61982616d7b5c4888554e
Files
-
bd3ec3efc5d61982616d7b5c4888554e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE