Behavioral task
behavioral1
Sample
bd80c9b012dbab18e82e454f2abe6c3d555010de0ca962ca8a838e635034fb73.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd80c9b012dbab18e82e454f2abe6c3d555010de0ca962ca8a838e635034fb73.exe
Resource
win10v2004-20240802-en
General
-
Target
bd80c9b012dbab18e82e454f2abe6c3d555010de0ca962ca8a838e635034fb73
-
Size
655KB
-
MD5
05570bd82f5a1ced6c8f8f9446dd110a
-
SHA1
1d9f3eb750b9b80945d8177fc5bc36c21d9e4234
-
SHA256
bd80c9b012dbab18e82e454f2abe6c3d555010de0ca962ca8a838e635034fb73
-
SHA512
d457e487bcc55af861e2dfd0479a0fa49b25f5ca9b29c47aaf87c09465f4d557bd0578496d61e57648c9362089c2d42b3bd898b0ee95c7a6cbcc2f571e47911a
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFh:1HNJDMor12mquPZjq7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd80c9b012dbab18e82e454f2abe6c3d555010de0ca962ca8a838e635034fb73
Files
-
bd80c9b012dbab18e82e454f2abe6c3d555010de0ca962ca8a838e635034fb73.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE