Behavioral task
behavioral1
Sample
bfe69a256bcf5841e86476c1358ddec1.exe
Resource
win7-20240221-en
General
-
Target
bfe69a256bcf5841e86476c1358ddec1
-
Size
1.5MB
-
MD5
bfe69a256bcf5841e86476c1358ddec1
-
SHA1
5b651612908ac51e65ec66e3cb7de07beb6c7731
-
SHA256
f2532d49cb0a306bfbe05ef9bf173d0798ad039a8fcbc7ab9fa402afe848ee95
-
SHA512
3d2b47fe1f3e5df0b137aa20af8bb22cac10d4b539b6e71fe59f45ca21c74e194303961dad8df40b3b30d4f712ddfa43ec06168abc968b758a4a549c05851114
-
SSDEEP
49152:r2U6cjQeMzBnrMSS44x3yN/K4Pg/7TTtoOssxqbqtYvhJ:r2UPDSnrMl44SZPgjvRxEqs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe69a256bcf5841e86476c1358ddec1
Files
-
bfe69a256bcf5841e86476c1358ddec1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE