Behavioral task
behavioral1
Sample
bdd2b5ad8e1e8d20c7be3800851e6650.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bdd2b5ad8e1e8d20c7be3800851e6650.exe
Resource
win10v2004-20240226-en
General
-
Target
bdd2b5ad8e1e8d20c7be3800851e6650
-
Size
199KB
-
MD5
bdd2b5ad8e1e8d20c7be3800851e6650
-
SHA1
5de67dc2c6e6a7f2287e8a1cb07c13b79a09c49a
-
SHA256
bb8433388d9ff0e9a176515e4d00d23c5da28ca0928fa0b6f60960317e214a12
-
SHA512
9de2eb847a06bcd4bc0dc662c9d14fa01268911abd6cdec4c83447ac89095c3fe79982e371ae50d386a11f511f18605e148eb2554487f0cf5c970f2bdd2e5116
-
SSDEEP
6144:y3egtF8ZbmevJcXIb/QAKcosNp8GgQftVukhR+UpuMY:fgtFebmgbYAAsNp+TeDY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdd2b5ad8e1e8d20c7be3800851e6650
Files
-
bdd2b5ad8e1e8d20c7be3800851e6650.exe windows:4 windows x86 arch:x86
3bbddddc423f2cb1f972650a395ea987
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
advapi32
RegCloseKey
comctl32
ImageList_Add
comdlg32
GetOpenFileNameA
gdi32
SaveDC
oleaut32
VariantCopy
shell32
ExtractIconA
user32
GetDC
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FCryptor Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ