Behavioral task
behavioral1
Sample
bfe333a52b568a7eecbc8e1a7fc97eb8.exe
Resource
win7-20240221-en
General
-
Target
bfe333a52b568a7eecbc8e1a7fc97eb8
-
Size
298KB
-
MD5
bfe333a52b568a7eecbc8e1a7fc97eb8
-
SHA1
4aa576a89e6b182ae8fca53e5295fe29a3e8ebe8
-
SHA256
0dfb202efff8289e98e3ca156323655e3210ef75f1cc6cdbb65fa0c525ff315e
-
SHA512
d271e1f8d5a4d57b4d13263034072ef944093961118b22f31317ea9f0d332a26758e7b7f26752e4cea002d8a0c0199ca11df75511f2131a1dd99469f0f5d368f
-
SSDEEP
6144:toNSBOwEK0V9rR7qSlHHRkYU2GthsoU2v7rJ31aZm2QYbWrInoS:twSgwEK0V9V793tUvEoLp3c02xyInoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe333a52b568a7eecbc8e1a7fc97eb8
Files
-
bfe333a52b568a7eecbc8e1a7fc97eb8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE