Behavioral task
behavioral1
Sample
bdbbc3bf101b9b98e10e2640905a7de6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdbbc3bf101b9b98e10e2640905a7de6.exe
Resource
win10v2004-20240226-en
General
-
Target
bdbbc3bf101b9b98e10e2640905a7de6
-
Size
67KB
-
MD5
bdbbc3bf101b9b98e10e2640905a7de6
-
SHA1
88363d96cc68feb451becb943fd206b11d319335
-
SHA256
e1721938baf27679fc63f78fa6cee0ef341cd2a11dbc2d03669e23ef039b8340
-
SHA512
d5ac0a5545b24be9eec01a10b66ea246f75f0e75b7476e3af60407529588522af5e9df2878e76c09dc73f7eebfca43a9933920459c969d9c19428e5399fcf827
-
SSDEEP
1536:dA6o55nHtO4Wb8gd67VvEcsIwnom6UJMj0r3:dh6nNO4WbZ0VPsIwB6LjG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdbbc3bf101b9b98e10e2640905a7de6
Files
-
bdbbc3bf101b9b98e10e2640905a7de6.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE