Behavioral task
behavioral1
Sample
bda719b3526ebb022ab4ebe1736b870c.exe
Resource
win7-20240221-en
General
-
Target
bda719b3526ebb022ab4ebe1736b870c
-
Size
388KB
-
MD5
bda719b3526ebb022ab4ebe1736b870c
-
SHA1
7dd806fb1517e3aec585ac7fe4e12dc1beeffd97
-
SHA256
e53dde21bc06eeadc25c74a0aacef22d6b416564e8e0c07bc483bd3a2d41d267
-
SHA512
edabf29e8224d2c4ea14edeb73d5b4cde9cf5f2dd2d43f4011178bead4e4eb984ff53fc59d78c67dee12dcaa26e3e74203d953feb8188a83a7de5947c8ebd612
-
SSDEEP
12288:B87KZyGl5C+GcNMlRPIKBVu9AiwuU0MzV:wIyGpG6wQKBsmh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bda719b3526ebb022ab4ebe1736b870c
Files
-
bda719b3526ebb022ab4ebe1736b870c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE