Behavioral task
behavioral1
Sample
bde7af4fabc5c644dc878b6ed218f58b.exe
Resource
win7-20240221-en
General
-
Target
bde7af4fabc5c644dc878b6ed218f58b
-
Size
784KB
-
MD5
bde7af4fabc5c644dc878b6ed218f58b
-
SHA1
5367b6557601fc15cc4c18928bed3a8e88950d82
-
SHA256
8c350b607413b2ae812af533d6533114da5c1a2e28fb826db641d34a9fb67f90
-
SHA512
61dc49196c09a0c61f3f4e3398e5db2be36052d2c0045bda84189254bc31fce4505b706bf08b4894519f2ab3780ccb7acd4e8ebea5c7bc44561328344e1fe7d3
-
SSDEEP
12288:Q04TDwOstEHxji1hXEhcCOgNEU/ltsVHFSSdUkZgTdZXiDi9pRkVpq3RH/Mz+bWC:goYFiurXsVlSb0gxxn/TRrbT5ktOh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde7af4fabc5c644dc878b6ed218f58b
Files
-
bde7af4fabc5c644dc878b6ed218f58b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE