Behavioral task
behavioral1
Sample
bfdf67432633d2876cc9aa526727546a.exe
Resource
win7-20240221-en
General
-
Target
bfdf67432633d2876cc9aa526727546a
-
Size
220KB
-
MD5
bfdf67432633d2876cc9aa526727546a
-
SHA1
98bfe7435e177a96494737912e0de7a8cb839d24
-
SHA256
095d134a4f10025b3ebe46258b9d1aa2778f43e47571ef0d19e44c97de795f2c
-
SHA512
f77aa8f136d7b84f74ff8df8188f1b52e1c533cedf3642b99717cc3be3f0c62e71ad4f9e673742ddb197aae93599095a568066c8afcf9b8c69d382fcc3733089
-
SSDEEP
6144:/wHJX1UkwqzOI3CzzwyRpqZ3/D8S9oS4:SJX4qzOISzztRp4PDX9oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfdf67432633d2876cc9aa526727546a
Files
-
bfdf67432633d2876cc9aa526727546a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE