Behavioral task
behavioral1
Sample
bda1089e4c506f757395bf02eb1f289e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bda1089e4c506f757395bf02eb1f289e.exe
Resource
win10v2004-20240226-en
General
-
Target
bda1089e4c506f757395bf02eb1f289e
-
Size
44KB
-
MD5
bda1089e4c506f757395bf02eb1f289e
-
SHA1
73a19eb7ddee4e708dacdb1d704ce4cb46b5be55
-
SHA256
3e314ea456e13c7873dc2b04fbd16068cac6f2787bc12098519cb28e1eab6fab
-
SHA512
7bb02fbb4760c03a166a98d9581052d3bce3e1ab5c8dcec715266a877df04892d4f8b4c5de2f6ce6ad5910a4dd0bc7ce4600b8cf8901b7f4a7a7f8024339d1d7
-
SSDEEP
768:omT2ljlL5b+nXLpXwnslmxtOsoI8A+D1dykKsWkgkLuFaRXl3S7:olj95b+nKbIs78JChsJg63Xl3S7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bda1089e4c506f757395bf02eb1f289e
Files
-
bda1089e4c506f757395bf02eb1f289e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 50B - Virtual size: 50B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ