Behavioral task
behavioral1
Sample
bf5480d6776b442e7a4c51acb295b640.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf5480d6776b442e7a4c51acb295b640.exe
Resource
win10v2004-20240226-en
General
-
Target
bf5480d6776b442e7a4c51acb295b640
-
Size
5.3MB
-
MD5
bf5480d6776b442e7a4c51acb295b640
-
SHA1
3aaeece1a6b9c1d8e25dc1ef096964d9083857f0
-
SHA256
a971c84a416f03daafae50b375dd8e7b2fc36f469a2a46d911a3ea2be1bd0cb2
-
SHA512
0927e73034d7ce1e62fcb4182d4f1d5188ee5658d2e55d41577787e0c8fcc30ac43a45e7e367d7689542cf335692ed4d4426b5b955a5d4f01b3e77af473cafb1
-
SSDEEP
98304:DjHfuM97ZPvCodkHKRaqm29a3c59gsHYikb44I3znYQDV+qm29a3c59gsHYikp:n/uuVS+kxuZgHf43DBDViuZgHF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf5480d6776b442e7a4c51acb295b640
Files
-
bf5480d6776b442e7a4c51acb295b640.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE