Behavioral task
behavioral1
Sample
bf8824fbae13a25886ae41ab7446283408d5210d60df75cad72da91fa54b3c5b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bf8824fbae13a25886ae41ab7446283408d5210d60df75cad72da91fa54b3c5b.exe
Resource
win10v2004-20240226-en
General
-
Target
bf8824fbae13a25886ae41ab7446283408d5210d60df75cad72da91fa54b3c5b
-
Size
6.4MB
-
MD5
ca6b0eb32cea05df1e08c627cb0dcbf2
-
SHA1
056da8ccd9b9ad4615f2021b55740d397843a02a
-
SHA256
bf8824fbae13a25886ae41ab7446283408d5210d60df75cad72da91fa54b3c5b
-
SHA512
c44b153c0d50d347276f249eac908f54fc039cac35762926718d5ebb3eabceec8bc5cc099ec35f541cf3ce42a6ca8fff5f02d8d3845763014adf31e3c1b1ade7
-
SSDEEP
98304:6v8VyRM1B6U6EtZnbE+zjEi2wVOSNgrC1nkLtm5Mrnnr2BzRezivVD/V6hzlrXnV:6PM1AegOHR3f1ggMrycz2tVkXrPnp
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Detects Pyinstaller 1 IoCs
resource yara_rule sample pyinstaller -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf8824fbae13a25886ae41ab7446283408d5210d60df75cad72da91fa54b3c5b
Files
-
bf8824fbae13a25886ae41ab7446283408d5210d60df75cad72da91fa54b3c5b.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
backdoorBlueprint12.pyc