Behavioral task
behavioral1
Sample
bfa78349f909a7bd0fd3ea0b8c9dd4a1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bfa78349f909a7bd0fd3ea0b8c9dd4a1.exe
Resource
win10v2004-20240226-en
General
-
Target
bfa78349f909a7bd0fd3ea0b8c9dd4a1
-
Size
347KB
-
MD5
bfa78349f909a7bd0fd3ea0b8c9dd4a1
-
SHA1
e6b5729a35829d535d596a54b82f3eb420615812
-
SHA256
fbf4993638737ed24ccb2200d3c206e6775ad326147d6221dd91110651d5812a
-
SHA512
8baf8c071c8af434b5cbe7e7b21c3672937caded75200ce8718e366107bfda3027396e3f180be98859bd6f84236afa27f2df752eb2226b78bbb580cbbd4a009f
-
SSDEEP
6144:hGyGw7Bz9snpVIwZ/g9veWebCBpfqWUba3ZDOsKF9:h3r7ABYNVeIqWUbaJ1O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa78349f909a7bd0fd3ea0b8c9dd4a1
Files
-
bfa78349f909a7bd0fd3ea0b8c9dd4a1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE