Behavioral task
behavioral1
Sample
bc2ca3b6bebb76a6e2ea43698082ecd4279a1d3a662785c97c411d605212b162.exe
Resource
win7-20240508-en
General
-
Target
bc2ca3b6bebb76a6e2ea43698082ecd4279a1d3a662785c97c411d605212b162
-
Size
338KB
-
MD5
f3dbd1a54aae993c098ce02a5cd30c50
-
SHA1
113e20423b007c7556df3f61035c3fa059127b6a
-
SHA256
bc2ca3b6bebb76a6e2ea43698082ecd4279a1d3a662785c97c411d605212b162
-
SHA512
a8f1a49f6a84e4181f492d81cc018dc67e9bb798ff918442006d6ba2c90eae83be46846a75b52de8ede11f357620d7821e337581b9bcdf545fc1a2e5bf011eba
-
SSDEEP
6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnf:U4wFHoSK1zBjA892lY196AUo0LX2tZqt
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc2ca3b6bebb76a6e2ea43698082ecd4279a1d3a662785c97c411d605212b162
Files
-
bc2ca3b6bebb76a6e2ea43698082ecd4279a1d3a662785c97c411d605212b162.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ