Behavioral task
behavioral1
Sample
bdcb0661c858d5cce5107ec69100d407.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdcb0661c858d5cce5107ec69100d407.exe
Resource
win10v2004-20231215-en
General
-
Target
bdcb0661c858d5cce5107ec69100d407
-
Size
12KB
-
MD5
bdcb0661c858d5cce5107ec69100d407
-
SHA1
52f5289aa773204e50d70feae73e940315e5ad14
-
SHA256
bedcd27153da2a176a0b09b33a675d89eae0fea1b905b8f04abd117f144d1d92
-
SHA512
17f51ac82dec7bb6861c8c35eca20e6cf6581646f086a98bfaec24a9894710b819b37c9451f2b9e447841587ed73d842ce1229deb6298ea22b8e3144ba234d09
-
SSDEEP
192:Y/Liyd0HWpUSCtiED+L5s0NesE1U/Z+G7DbemuaQ3cK/myuiAwKtkHPKc:YTi4G/iEEDXE1sZr7DCTZdgNGHic
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdcb0661c858d5cce5107ec69100d407
Files
-
bdcb0661c858d5cce5107ec69100d407.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE