Behavioral task
behavioral1
Sample
bf983a9eb00e253a3a6487c243d6345e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf983a9eb00e253a3a6487c243d6345e.exe
Resource
win10v2004-20240226-en
General
-
Target
bf983a9eb00e253a3a6487c243d6345e
-
Size
84KB
-
MD5
bf983a9eb00e253a3a6487c243d6345e
-
SHA1
0e408fb25cdcfdd3d2967630521aa08a209bdaa7
-
SHA256
59a0d3b0725d6bd41953a8e5cc6b305b4815bde0c86d3ce79af54195e9436df0
-
SHA512
a2b9dc6f31ef44cd893445592c206b80ed6e0e5ec3efbc98c60894603ca7601ab32371c279e03ed0d527e094869f0da5faa2b4ac84a206c7f845a27fa4e2d2fc
-
SSDEEP
1536:s9Z3KcR4mjD9r8226+v9Z3KcR4mjD9r8226+cc8HzKRrNpAG:sr3KcWmjRrzSvr3KcWmjRrzScc8HzWJ/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf983a9eb00e253a3a6487c243d6345e
Files
-
bf983a9eb00e253a3a6487c243d6345e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE