Behavioral task
behavioral1
Sample
bd4f3cb0a645a241407c60ee0839de78.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd4f3cb0a645a241407c60ee0839de78.exe
Resource
win10v2004-20231215-en
General
-
Target
bd4f3cb0a645a241407c60ee0839de78
-
Size
10.0MB
-
MD5
bd4f3cb0a645a241407c60ee0839de78
-
SHA1
a107266c52cf704d8ef2712f804986b9673c8462
-
SHA256
2be3ddd612374925a1b3997dfc1ccdfee89aaf42d21306c35a4832d8d43c9232
-
SHA512
f965e53ba95eb40b183aec7b90daf600e42906059e39d403c5c13d90703b77619c4994edef02b7b46e40708c22fc8779611ad1501feca81c0edea2a8fbeef159
-
SSDEEP
98304:VgV/WsCwMni/yEgVCc1fBC83iGGoDKdc+DVCc1fBC:sesCw9/yLMc1pC0ioudc+DMc1pC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd4f3cb0a645a241407c60ee0839de78
Files
-
bd4f3cb0a645a241407c60ee0839de78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE