Behavioral task
behavioral1
Sample
bdc3e4d06fa0899c7274a0484f456860.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdc3e4d06fa0899c7274a0484f456860.exe
Resource
win10v2004-20240226-en
General
-
Target
bdc3e4d06fa0899c7274a0484f456860
-
Size
2.7MB
-
MD5
bdc3e4d06fa0899c7274a0484f456860
-
SHA1
10ff9450c9aa1d7ebd63ca9837f5b9eb49bbc510
-
SHA256
2ea85f420522f6071eed3fd88c0a9c85328806df51aa1d6441ff8552d7f854a6
-
SHA512
b9648768608a4dae23992b9c04fb91025ec340a686cfe7ca6c68bdf2f6a66cd01bbfaf6c2ada43d4e40a3846a1ed466b767f002a64a6253b9954effbe758d679
-
SSDEEP
49152:c4NQZxMW3j7ncPMpWQMWQySBbLTaVR921F/AxWXjCfkoa8y42dLqiR9j:pNUz7c1QTpS8H2rPj+by4DiHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdc3e4d06fa0899c7274a0484f456860
Files
-
bdc3e4d06fa0899c7274a0484f456860.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE