Behavioral task
behavioral1
Sample
bd670f6c4203858155f7679d120c41d3.exe
Resource
win7-20240221-en
General
-
Target
bd670f6c4203858155f7679d120c41d3
-
Size
1.5MB
-
MD5
bd670f6c4203858155f7679d120c41d3
-
SHA1
858746f55712b403d0775c8ae59a44f6365a0a84
-
SHA256
2ff74fe7d54a1f75ec70fc8858aaa28c1e789bec3397b57690846094d8cae9a0
-
SHA512
94f32bf8dbbe248d4ac54571100c45b2dfa3c5c4c80297bb8c9fdb782ca9bcc5a3344c300cc0bda50032b38d3aed5a5326040606dcd60188ef90b3ea8e653380
-
SSDEEP
49152:qQ2mDBuOnjGqsrQGvQ1S1geVFVHGxrHdlNh5RDkT:SmDB7iqC3Q1S1gYHGxrHdPhnM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd670f6c4203858155f7679d120c41d3
Files
-
bd670f6c4203858155f7679d120c41d3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE