Behavioral task
behavioral1
Sample
bf9f04dac4c356576cd13d6fed95181c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf9f04dac4c356576cd13d6fed95181c.exe
Resource
win10v2004-20240226-en
General
-
Target
bf9f04dac4c356576cd13d6fed95181c
-
Size
168KB
-
MD5
bf9f04dac4c356576cd13d6fed95181c
-
SHA1
4d9185ae193b2bba0ccec99654577e4edd2ea05a
-
SHA256
3d5a3f80c41fb010dc2e14e1952d2f9d7ca04c73d4ddbfd313966cac7819c3d3
-
SHA512
9f22d25a0c57fba81bd7d686cea2b7a2101d9d504f5f14bba4fb3645ac716deaaf4d85e105f025881f8b792c2118e3b8d2475ba6990877673fc271101bffbda3
-
SSDEEP
3072:0wwcwLBQQIIEyFmc8BZniEC+kL62L+1KWqt7tR5OTNL5TE1ZDUI/GWRo2rXfZW:Xj44IEyFBInpCV62ayxr5ORdTE1dUI+9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf9f04dac4c356576cd13d6fed95181c
Files
-
bf9f04dac4c356576cd13d6fed95181c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE