Behavioral task
behavioral1
Sample
bdcf67928abbf328f96ecc6e469d9018.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdcf67928abbf328f96ecc6e469d9018.exe
Resource
win10v2004-20231215-en
General
-
Target
bdcf67928abbf328f96ecc6e469d9018
-
Size
1.6MB
-
MD5
bdcf67928abbf328f96ecc6e469d9018
-
SHA1
d123737a65645017c973e568956ab1d0fa648856
-
SHA256
79bfb335809af1a4d17827693d51a3b1e91ab38602fca8228cda827dff8072f4
-
SHA512
5c8468afd1299beee1df1dba2796e6ac1f01bf295babbd74bc7bb5fffa6351434bc058e87f2ab2100cce945566c283a1b6994c0db201e05e84bc0639b58552d3
-
SSDEEP
49152:kyISDl1xgEJRXQRacakLz0eo8kIX+NW+jlDOtLCcakLz0O:k0Dl1xgEJRXZcakcejkIX+MylDCLCcaw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdcf67928abbf328f96ecc6e469d9018
Files
-
bdcf67928abbf328f96ecc6e469d9018.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE