Behavioral task
behavioral1
Sample
bffda460fbbb7975d23b4b00416c5fc4.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bffda460fbbb7975d23b4b00416c5fc4.exe
Resource
win10v2004-20231215-en
General
-
Target
bffda460fbbb7975d23b4b00416c5fc4
-
Size
3.9MB
-
MD5
bffda460fbbb7975d23b4b00416c5fc4
-
SHA1
372006310dead2f6733312447b004360f3ad1542
-
SHA256
179c5e4863b5075ce42a978a462f1c1763ca2ca9be37398c81f80a3988a519d4
-
SHA512
20dd2185e88db4505f941bce1e46813ba5bf7558419317b1310e0e79143eb9c9bb198537c7d793b986184e251c4423cb4671adef8c33964603f65aad6155884f
-
SSDEEP
98304:/dU4dnm32A9zyULG+ANdmDi+yA9zyULG+DZ5qHZ6avA9zyULG+ANdmDi+yA9zyU1:q/XzLqlLmW+DzLqbHZz4zLqlLmW+DzLq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bffda460fbbb7975d23b4b00416c5fc4
Files
-
bffda460fbbb7975d23b4b00416c5fc4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE