Behavioral task
behavioral1
Sample
bd87269d88c9657fe5bcf60dd7a9d4b8.exe
Resource
win7-20240220-en
General
-
Target
bd87269d88c9657fe5bcf60dd7a9d4b8
-
Size
784KB
-
MD5
bd87269d88c9657fe5bcf60dd7a9d4b8
-
SHA1
7a4dd95776540b68e5b52962dc1ebfea853b81ac
-
SHA256
3260ab1946de346240779460fb50a711da687ddcc47b642f0ee3db089243da4e
-
SHA512
73b5ebd63dad3392ed046e8d962b7dbb2d3c7e8fb628affe944ed3e5f482ce148b570b42c8611392e19fa4c7ec7975bf802b951a6bbe896ed839b9c6fc04d18a
-
SSDEEP
12288:MAqKvzJMaFgKZ5lR/3HquYPLjoBGxkuZeR4l7MwAcT9f2MX+C2jtIzvD:Mw6y5lRfqXPnxJY4Nn9fbQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd87269d88c9657fe5bcf60dd7a9d4b8
Files
-
bd87269d88c9657fe5bcf60dd7a9d4b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE