Behavioral task
behavioral1
Sample
bd482353f81d01002fd6b0c0d1fa4321.exe
Resource
win7-20240221-en
General
-
Target
bd482353f81d01002fd6b0c0d1fa4321
-
Size
1.1MB
-
MD5
bd482353f81d01002fd6b0c0d1fa4321
-
SHA1
14e96b71d6b07d83304a122834be7f4ff996a551
-
SHA256
52d0361951bbe7f68c391d9003ebdb6d965ce170db664eaec942912b3d9e9d32
-
SHA512
0297d7532c3dac8ec8a46d6702b32be78d05b8731bc7c748302a47ff70519b99ccb32fd896a052800720c08a81ee9a2357669f5eeea424d946102acb220767bd
-
SSDEEP
24576:iF/dRseVW+PaKubjufwgU5TgqtFUm7MMzA:i5bLPoj9tTPFUYMMs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd482353f81d01002fd6b0c0d1fa4321
Files
-
bd482353f81d01002fd6b0c0d1fa4321.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE