Behavioral task
behavioral1
Sample
bc56a7411533a8e3f2e6069260ff1497054cf3a569431d17a06e46b458bbf1a9.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bc56a7411533a8e3f2e6069260ff1497054cf3a569431d17a06e46b458bbf1a9.exe
Resource
win10v2004-20240426-en
General
-
Target
bc56a7411533a8e3f2e6069260ff1497054cf3a569431d17a06e46b458bbf1a9
-
Size
2.7MB
-
MD5
f18fd1a2594f63dd52d43ec162fa84d4
-
SHA1
db8c4886a5ef140ee94975552f0ca6e9800cd7e9
-
SHA256
bc56a7411533a8e3f2e6069260ff1497054cf3a569431d17a06e46b458bbf1a9
-
SHA512
a9435680f1cf02adfb35ae9f940e9e3f62c11a202f0d0423ed2ca80b74122702be3348e391ab12eef1837444261f5b8230d2686dcae545e38ad45a60cddbdc8e
-
SSDEEP
49152:c3KtIfoHUyK+oESBDqeTWrc+Lf4gVBRWS9G9Vq5:c+Ko0r+oESIQW4+LPBRvG9Vq5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc56a7411533a8e3f2e6069260ff1497054cf3a569431d17a06e46b458bbf1a9
Files
-
bc56a7411533a8e3f2e6069260ff1497054cf3a569431d17a06e46b458bbf1a9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE