General
-
Target
BMW_CIC_FSC_Generator.exe
-
Size
7.3MB
-
MD5
2499f3e9ab2e77fa1414fb8093660a3a
-
SHA1
3ad34c897290de5436a53881d2aeee414ba9a268
-
SHA256
aaa7b2ac87331aaf46e395a228b81b3699ee72d67b9ca4d236c2167c0f65c2a0
-
SHA512
ee985b2ecdacdd075502c6b8703ba048a54ea10cb5a652d2a78d1bc37468f75c0157f9acaaaa4449923f1baf6897bb5fe9428d4ca546ee2317a7a58a4d091b0a
-
SSDEEP
196608:H1x4b3kp293DlvuYNleQ2KSRVdzjHoIHMQG:Vxm3kpiR2EwPzgoM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BMW_CIC_FSC_Generator.exe
Files
-
BMW_CIC_FSC_Generator.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 11.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE