Behavioral task
behavioral1
Sample
bd8a78ffa2164c9a5fa7484a99675ee3.exe
Resource
win7-20240221-en
General
-
Target
bd8a78ffa2164c9a5fa7484a99675ee3
-
Size
1.5MB
-
MD5
bd8a78ffa2164c9a5fa7484a99675ee3
-
SHA1
873d99bdc0e42cd8abe613cbf71ff77a6dac86de
-
SHA256
e8e81eabe1095374a72bde29d94fc2df755c2ab1f2b53faa2945e046186b0993
-
SHA512
2bc66f32b49f824f45fe0df95cd0d2019c3e25f8d391eb9b55a39780ababa68561448e631b0aaba3fb42c06bef9b26337d348e5c7bcf71817fb240658b319fa3
-
SSDEEP
49152:xnzYoEdpCfDwad1iYdQ0vwIH+h9XkzK8Nk6/q5o6+U:xzRS+DbS6beh9UzFmo0+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd8a78ffa2164c9a5fa7484a99675ee3
Files
-
bd8a78ffa2164c9a5fa7484a99675ee3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE