Behavioral task
behavioral1
Sample
ba9e60b546f41cbf9922aaa218f171e482596bd930f2bc07f839dc3f0724fd04.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba9e60b546f41cbf9922aaa218f171e482596bd930f2bc07f839dc3f0724fd04.exe
Resource
win10v2004-20240802-en
General
-
Target
ba9e60b546f41cbf9922aaa218f171e482596bd930f2bc07f839dc3f0724fd04
-
Size
50KB
-
MD5
b5ac4ff86a5bb352eb4a3f26a438cab6
-
SHA1
5a4f6cd5b77db81dece23a4a9ba983791d3d7c64
-
SHA256
ba9e60b546f41cbf9922aaa218f171e482596bd930f2bc07f839dc3f0724fd04
-
SHA512
7ee886566975c8eb31daf19a2a1eb33c4cc42980369a85887a22ffe79e76d500231bf0e2cccb4863e57726ea83c5e4b9861a5851340dbaf37d240b18565e2a53
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3rgrMqpYpRAIK:V7Zf/FAxTWM2MqpYpTK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba9e60b546f41cbf9922aaa218f171e482596bd930f2bc07f839dc3f0724fd04
Files
-
ba9e60b546f41cbf9922aaa218f171e482596bd930f2bc07f839dc3f0724fd04.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE