Behavioral task
behavioral1
Sample
bcddd89acac10fbea1ee691ae79f2de9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcddd89acac10fbea1ee691ae79f2de9.exe
Resource
win10v2004-20240226-en
General
-
Target
bcddd89acac10fbea1ee691ae79f2de9.bin
-
Size
3.9MB
-
MD5
bcddd89acac10fbea1ee691ae79f2de9
-
SHA1
7e74b6bdbf8a0db5e1cf5f3e11da9d752071d27b
-
SHA256
87ef1d498fe4b5084034322e46c07b6c385903b82f2bea8befb55555f807ffcb
-
SHA512
2064a2343f46332816e59aa6707f024667be8c88514625fe389b72994a87fd19a06842be20a29433165c2a13fda7b86c54080bee0a391abd2318b95c67a43634
-
SSDEEP
98304:qLR2GsaSA9zyULG+e+djJ8uskbJA9zyULG+R3pnZ9y0+hRbZA9zyULG+e+djJ8uc:F4zLqf+Nx1b2zLqspv+yzLqf+Nx1b2z+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcddd89acac10fbea1ee691ae79f2de9.bin
Files
-
bcddd89acac10fbea1ee691ae79f2de9.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE